#!/bin/sh
# The only allowed argument is a peer name; the privileged helper validates it
# against the root-owned list authorized while enabling protection.
test "$#" = 1 || exit 2
exec /opt/zond/zond-guard resolve "$1"
