  owner @{HOME}/.pki/nssdb/pkcs11.txt rwlk,
  owner @{HOME}/.pki/nssdb/pkcs11.txu rwlk,
  owner @{HOME}/.pki/nssdb/key4.db{,-journal} rwlk,
  owner @{HOME}/.pki/nssdb/cert9.db{,-journal} rwlk,
