@wduncan hey:
Which specific system-files locations does blackrock-bci-system-user need access to and for which purpose?
Also, why does blackrock-bci-system-user need snapd-control at all? Since this is a very privileged interface, the use of such interface is primarily intended to be used by brand stores owners The snapd-control interface