1 2 3 4
restrict-allowed = network-sandbox masters = gentoo sign-manifests = false thin-manifests = true