From: "Theo de Raadt" <deraadt@openbsd.org>
Subject: Re: doas -l feature
To: David Crumpton <david.m.crumpton@gmail.com>
Cc: tech@openbsd.org
Date: Fri, 06 Jun 2025 09:55:37 -0600

doas can be used with a doas.conf that is mode 600 or 400.

A user can do what they are permitted to do, but they can't read
doas.conf to see what is permitted.

Your proposal is a pretty big change.

So I don't think this is the right way to go.