<aegis>
  <request>
    # ohm-plugins-misc
    <credential name="UID::user"/>
    <credential name="GID::users"/>
    <for path="/usr/bin/ohm-session-agent"/>
  </request>
</aegis>
