tool = "read_file" mode = "auto" max_taint = "private" [constraints] path = ["/etc/**"]