allow = root
groups = admin
depends = global