A restricted profile shares the Unix user with the fleet. If its $HERMES_HOME/sift/client.toml is missing, returning ~/.config/sift would silently use the fleet key. Non-default HERMES_HOME now pins the profile path so loadClient errors instead.
A restricted profile shares the Unix user with the fleet. If its $HERMES_HOME/sift/client.toml is missing, returning ~/.config/sift would silently use the fleet key. Non-default HERMES_HOME now pins the profile path so loadClient errors instead.