# Cloud workspaces (code store, workspace.<domain>): create/start/stop/delete the buyers' isolated LXD containers,
# their bridge + firewall and the store's /w/<id>/ proxy block — every verb allow-listed and validated inside the helper.
www-data ALL=(root) NOPASSWD: /usr/local/sbin/alpha-cws
