<aegis>
  <request>
    <credential name="UID::user" />
    <credential name="GID::users" />
    <for path="/usr/bin/mthemedaemon" />
  </request>
</aegis>
