I'm attempting to follow the CIS macOS 10.12 security benchmark. One of
the recommendations (5.1.1) is to remove read and execute from group and
global. Easy enough to document , but for a live environment we'd want
something to run when a new home f...
