deny /tmp/pqp/** r,
