Comment by tidwall

That's the only way right now. The other ways I'm considering is with an environment variable and/or acl.