pub fn session_gate(
store_root: Option<&Path>,
nick: &str,
cap: Option<&str>,
peer_uid: Option<u32>,
) -> Result<(), String>Expand description
The daemon’s check before acting as nick for a socket caller (slice 2 of per-session
accounts): a session account needs its own capability, and its OS owner when recorded. Nicks
that are not session accounts pass unless REQUIRE_SESSION_CAP_ENV is 1. The reason
carries no secret.