deny/write-/etc/**
