access: first users at genesis

--bootstrap-users gives a new swarm a registry from its first change,
each first user with everything; other users may do nothing until
added. Without it the swarm has no registry and works as before.

Auth plan M1.

1 files changed, 6 insertions, 0 deletions

diff --git a/docs/example.toml b/docs/example.toml
index a868327..26be818 100644
--- a/docs/example.toml
+++ b/docs/example.toml
@@ -85,6 +85,12 @@ htpasswd = "/etc/continuum/htpasswd"
 # writable.
 # protocol-writers = ["alice"]
 
+# With genesis: the new swarm's first users, each may do everything, protocol data and
+# managing users included (docs/access.md). Unset, the users of htpasswd may read and
+# write the swarm's data, and those also in protocol-writers everything. A swarm nobody
+# could manage doesn't start: set this, or protocol-writers, for one of htpasswd's users.
+# bootstrap-users = ["alice"]
+
 # How log lines look: text (timestamped), journal (for systemd's journal: no timestamp or
 # colours, the level as each line's priority, for journalctl -p), or auto: journal when
 # stdout goes to the journal, else text.