I’m +1 for granting personal-files access to ~/.ngrok2 since it is a well known name specific to ngrok.
personal-files
~/.ngrok2