default		allowed_privs		all
forced_privs usr/bin/at file_chown,file_dac_read,proc_audit_tcb
forced_privs usr/bin/atq file_dac_read
