- mkdir -p ~/Public/zcrypt/label/ # Pick an arbitrary label for your class.
- fs sa ~/Public/zcrypt/label/ system:anyuser none # Keep randoms from reading your key
- fs sa ~/Public/zcrypt/label/ system:groupname read # Allow an appropriate user/group to read the key
+ # Pick an arbitrary label for your class.
+ mkdir -p ~/Public/zcrypt/label/
+ # Keep randoms from reading your key
+ fs setacl -dir ~/Public/zcrypt/label/ -acl system:anyuser none
+ # Allow an appropriate user/group to read the key
+ fs setacl -dir ~/Public/zcrypt/label/ -acl system:groupname read
+ # Generate a 126-byte key with no NUL or newline bytes