# The aggregator (user secubox) drives the Maigret LXC through maigretctl.
# This is the ONLY privileged surface for the module.
secubox ALL=(root) NOPASSWD: /usr/sbin/maigretctl
