allow/read-/usr/**
