bitmagnet requires no special privileges and writes no files (other than logs).

Its configuration, including PostgreSQL credentials, is read as config.yml
in the current working directory, the user's home directory and separate
per-key environment variables, in that order.

Secrets and the rc.subr(8) service may thus be limited with an unprivileged user
and a dedicated configuration directory:

	# useradd -g =uid -s /sbin/nologin -d /nonexistent _bitmagnet
	# install -d -m 750 /etc/bitmagnet
	# rcctl enable bitmagnet
	# rcctl set bitmagnet execdir /etc/bitmagnet
	# rcctl set bitmagnet user _bitmagnet

To avoid colours in the default format:

log:
  json: true
