This makes it impossible to use the -s command line argument on the fwknop client command line, so either -R \
has to be used to automatically resolve the external address (if the client behind a NAT) or the client must \
know the external IP and set it via the -a argument."))
+s:option(Value, "ENABLE_CMD_EXEC", "ENABLE_CMD_EXEC", translate("This instructs fwknopd to accept complete commands that are contained within an authorization packet. \
+ Any such command will be executed on the fwknopd server as the user specified by the “CMD_EXEC_USER” or as the user \
+ that started fwknopd if that is not set."))
s = m:section(TypedSection, "config", translate("fwknopd.conf config options"))
s.anonymous=true