should detect added or removed disks as well. backup labels go in /var/backups/disklabel.XXX (XXX = disk name, e.g., sd0), and the changelist style backups have .current or .backup suffixes * minor whitespace, formatting, and comment cleanup
the file allows each action taken by security to be turned on or off.