config.config. - Overview of the macOS Authorization Right
macOS 10.6 / 10.7 / 10.8 / 10.9 / 10.10 / 10.11 / 10.12 / 10.13 / 10.14
{
'class' : 'deny',
'comment' : 'Wildcard right for any change to meta-rights for db modification. Not allowed programmatically (just edit this file).'
}