blacklist /tmp/.X11-unix

#protocol unix,inet,inet6
tracelog

private-bin newsboat,curl
private-etc ca-certificates,resolv.conf,ssl