Denote multiple arguments with 'arg ...' not 'args'

A few programs used the plural in their synopsis which doesn't read as
clear as the obvious triple-dot notation.

mdoc(7) .Ar defaults to "file ..." if no arguments are given and consistent
use of 'arg ...' matches that behaviour.

Cleanup a few markups of the same argument so the text keeps reading
naturally; omit unhelpful parts like 'if optional arguments are given,
they are passed along' for tools like time(1) and timeout(1) that obviously
execute commands with whatever arguments where given -- just like doas(1)
which doesn't mention arguments in its DESCRIPTION in the first place.

For expr(1) the difference between 'expressions' and 'expression ...' is
crucial, as arguments must be passed as individual words.

Feedback millert jmc schwarze deraadt
OK jmc

s/authorization/authentication/g

OK kn@ tedu@

Be more explicit by stating that the -n flag is linked to the nopass option
in doas.conf instead of a generic "would prompt for password", which could
lead people into believing that persist could work with this option.

OK tedu@
Feedback and OK kn@

note that authentication is required, unless otherwise configured.
ok sthen

tweak wording a bit. always talk about creating a new environment.
also document DOAS_USER.
ok deraadt jmc

mention that doas(1) resets the umask(2);
OK tedu@

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

s/authorization/authentication/g

OK kn@ tedu@

Be more explicit by stating that the -n flag is linked to the nopass option
in doas.conf instead of a generic "would prompt for password", which could
lead people into believing that persist could work with this option.

OK tedu@
Feedback and OK kn@

note that authentication is required, unless otherwise configured.
ok sthen

tweak wording a bit. always talk about creating a new environment.
also document DOAS_USER.
ok deraadt jmc

mention that doas(1) resets the umask(2);
OK tedu@

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

Be more explicit by stating that the -n flag is linked to the nopass option
in doas.conf instead of a generic "would prompt for password", which could
lead people into believing that persist could work with this option.

OK tedu@
Feedback and OK kn@

note that authentication is required, unless otherwise configured.
ok sthen

tweak wording a bit. always talk about creating a new environment.
also document DOAS_USER.
ok deraadt jmc

mention that doas(1) resets the umask(2);
OK tedu@

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

note that authentication is required, unless otherwise configured.
ok sthen

tweak wording a bit. always talk about creating a new environment.
also document DOAS_USER.
ok deraadt jmc

mention that doas(1) resets the umask(2);
OK tedu@

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

tweak wording a bit. always talk about creating a new environment.
also document DOAS_USER.
ok deraadt jmc

mention that doas(1) resets the umask(2);
OK tedu@

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

mention that doas(1) resets the umask(2);
OK tedu@

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

mention environment resetting here as well. ok millert

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.

-L means no command

clarify that -L will exit without running a command.

add support for the verified auth ioctls using 'persist' rules.
ok deraadt henning

tighten up some wording

Support -a <auth_style> in doas(1). Allows specifying a non-default auth
style, for example if you have "auth-doas=yubikey,passwd" in login.conf,
doas will usually want yubikey authentication, but will allow a fallback
of "doas -a passwd".

Avoids the need for sudo in a number of cases, at the expense of 5 added
lines of code (and one of those is only to avoid >80 columns).

Adapted from a diff by Renaud Allard, ok dlg@ tedu@

some improvements from michael reed;

small clarifications

nflag (as in sudo, force non-interactive mode)
as discussed with ted@

Implement command matching without execution. This just extends
functionality of the -C flag, so we are not introducing more garbage.

Input and okay from jmc@ (documentation) and tedu@ (everything).

options w/o args go first in SYNOPSIS, and add -C to usage();

cases should line up with switch, from Dimitris Papastamos

Add argument matching support to doas.

Input and generic support from many. Final okay from tedu@.

whitespace;

spell out complete path to config file, okay tedu@

Add doas -s as a shorthand for doas $SHELL. ok tedu

add some missing content and markup and optimize some indentation
ok tedu@

tweak wording

improve wording, from Thanos Tsouanas

import doas. still subject to changes, large and small.