-The main requirement for a `zcrypt`ed zephyr class is to have a key and distribute it to all the users of the class. Typically, this is done by storing the key in AFS. You can set that up with:
-
- mkdir -p ~/Public/zcrypt/label/ # Pick an arbitrary label for your class.
- fs sa ~/Public/zcrypt/label/ system:anyuser none # Keep randoms from reading your key
- fs sa ~/Public/zcrypt/label/ system:groupname read # Allow an appropriate user/group to read the key
+The main requirement for a `zcrypt`ed zephyr class is to distribute a key to all the intended users of the class. Typically, this is done by storing the key in AFS. You can set that up like this:
+
+ # Pick an arbitrary label for your class.
+ mkdir -p ~/Public/zcrypt/label/
+ # Keep randoms from reading your key
+ fs setacl -dir ~/Public/zcrypt/label/ -acl system:anyuser none
+ # Allow an appropriate user/group to read the key
+ fs setacl -dir ~/Public/zcrypt/label/ -acl system:groupname read
+ # Generate a 126-byte key with no NUL or newline bytes