the user must pass -- or . to indicate stdin, otherwise you cannot run the client within a script
initial permissions should be inside attachSession