On Fri, Jan 19, 2018 at 02:41:42PM +0100, Ludovic Courtès wrote: > Authorizing keys is necessarily limited to root since the store is > shared among all users of the machine. I don’t see any way around that
Well, the daemon could update itself with its own privileges. How about maintaining authentication for a channel at runtime in RAM. When the daemon restarts it is lost. The channel will not be shared with other users. So every user maintains their own channels. When a channel reconnects it authenticates itself again. There really is no reason to share individual channels between users (other then their outputs). Pj.