{
	"acls": [
		{"action": "accept", "src": ["*"], "dst": ["*:*"]},
	],

	"nodeAttrs": [
		{"target": ["*"], "attr": ["funnel"]},
	],

	"ssh": [
		{
			"action": "check",
			"src":    ["autogroup:member"],
			"dst":    ["autogroup:self"],
			"users":  ["autogroup:nonroot", "root"],
		},
	],
}