profiles/base/accounts/group/policy-readers

# Members have read access to the device policy in /var/lib/devicesettings.
group:policy-readers
gid:303
users:attestation,authpolicyd,chronos,hardware_verifier,secagentd,shill,u2f