just 2 random comments: why not written in go and somehow related, any plan for a priv sep code ? This scares me as it is boudn to have bugs in parsing and have to run with all privilege