<aegis> <request> <!-- The daemon is supposed to be run as user. --> <credential name="UID::user" /> <credential name="GID::users" /> <!-- Request a few additional tokens for watchlets to use. --> <credential name="TrackerReadAccess" /> <credential name="Location" /> <for path="/opt/sowatch/bin/sowatchd" /> </request> </aegis>