allow keystore firmware_file:dir search;
allow keystore firmware_file:file { read getattr open };