The text e9a7602301f9, as Debian 11 (Bullseye) shipped it.
enable read only Roaming Profiles
vfs_fake_perms(8) on Linux now