services.firezone.gui-client.allowedUsers

All listed users will become part of the firezone-client group so they can control the tunnel service. This is a convenience option.