# Allow traffic by privileged group (used by daemon)
pass out proto { tcp, udp } group  { amnvpn } flags any no state