/tmp Temp allow:root,nobody cnidscheme:tdb