framework.sb   [plain text]

;; allow clients to communicate with secd
(allow mach-lookup (global-name "com.apple.secd"))