+extern type your_user;
+extern type your_group;
+{{UNIX users and groups that you're allowed to run as}}
+
+extern type your_path;
+{{A filesystem path that you're allowed to use.
+ The set of permitted values is generated from a set of roots by closing it
+ under the subdirectory relation.}}
+