Perfect!

Sent from my iPhone

> On Jun 6, 2025, at 09:55, Theo de Raadt <deraadt@openbsd.org> wrote:
> 
> doas can be used with a doas.conf that is mode 600 or 400.
> 
> A user can do what they are permitted to do, but they can't read
> doas.conf to see what is permitted.
> 
> Your proposal is a pretty big change.
> 
> So I don't think this is the right way to go.
> 
> 
> 
> 
>