permit persist john
deny nvidia
permit :docker
permit persist nopass :wheel