usr-local-bin/README: quick setfacl

bash/usr-local-bin/README.md

@@ -13,3 +13,10 @@ tail -n +1 /var/lib/flatpak/exports/bin/*
 
 `/usr/local/bin` is more likely to be in `$PATH` than the usual Snap vriants.
 If they are in $PATH, note `sudo snap alias ORIGINAL NEW`
+
+## File Access Control List
+
+```
+sudo setfacl --recursive --modify=u:root:rwx,o:rx /usr/local/bin/
+getfacl /usr/local/bin
+```

bash/usr-local-bin/nordvpn-off

@@ -13,9 +13,10 @@ nordvpn disconnect
 # Explicitly restores IPv6 since NordVPN disables it by setting this to 1.
 sudo sysctl net.ipv6.conf.all.disable_ipv6=0
 
-# My scripts autostart them, I don't want NordVPN to haunt logs.
-sudo systemctl stop nordvpnd.socket
-sudo systemctl stop nordvpnd.service
+# My scripts autostart them, I don't want NordVPN to haunt logs. However
+# I have to change my mind since meshnet requires them.
+#sudo systemctl stop nordvpnd.socket
+#sudo systemctl stop nordvpnd.service
 
 # Restarting networking ensures IPv6 connectivity will return.
 sudo systemctl restart iwd.service