allow priv_app device:dir { open read };