# xtrlock needs to be setgid shadow so it can read the shadow file
xtrlock: elevated-privileges usr/bin/xtrlock 2755 root/shadow 
