skarbiec policy unset

Invocation#

skarbiec policy unset <key>

Purpose#

Withdraw one administrative policy rule, the inverse of policy set.

Required inputs and options#

• Requires the key as one positional argument.

Output and state effects#

• Removes the key from the vault's policy object, saves the vault and appends policy-unset to the audit journal. Prints ok, key and removed; removed is false and nothing is written when the key was not set.

Refusals#

• A missing key argument is refused with the usage. An unset key is reported as removed false rather than refused, so a rerun is harmless.