  owner @{HOME}/.pki/nssdb/pkcs11.txt r,
  owner @{HOME}/.pki/nssdb/key4.db rwlk,
  owner @{HOME}/.pki/nssdb/cert9.db rwlk,
