#OP       TYPE      DESCRIPTION       CALLOUT INFO      PROGRAM ARG1 ARG2 ARG3 ...
#======   =======   ===============   ===============   ===============================
create    dns_resolver *              *                 /sbin/key.dns_resolver %k
create    user      debug:*           negate            /bin/keyctl negate %k 30 %S
create    user      debug:*           rejected          /bin/keyctl reject %k 30 %c %S
create    user      debug:*           expired           /bin/keyctl reject %k 30 %c %S
create    user      debug:*           revoked           /bin/keyctl reject %k 30 %c %S
create    user      debug:loop:*      *                 |/bin/cat
create    user      debug:*           *                 /usr/share/keyutils/request-key-debug.sh %k %d %c %S
create    cifs.spnego *               *                 /usr/sbin/cifs.upcall -t %k
create    dns_resolver *              *                 /usr/sbin/cifs.upcall %k
negate    *         *                 *                 /bin/keyctl negate %k 30 %S