So if you trust your bolt user you give them perms...
# office-hours
c
So if you trust your bolt user you give them perms for bolt_shim on a subset of nodes.