aursec-init: give /var/aursec mode 700
aursec-init: give /var/aursec mode 700

Non-root should not be able to read the password or otherwise manipulate that folder.

clawoflight/aursec,clawoflight/aursec