restrict-allowed = network-sandbox masters = gentoo sign-manifests = false thin-manifests = true