policy default deny
allow	uid=500	rspec	*	*