# Create `api` group with gid of 274 to limit access to the Bottlerocket API socket
g api 274 -