Usage: %P [options]
 -a[:aflag]        Audit to %P.lg
 -A path[:aflag]   Audit to path, or path%/%P.lg if path is a directory
                     aflag is a|b|d|da|db|p|pa|pb|t|ta|tb|u|ua|ub
                       a=append, b=backup, d=datestamp,
                       p=process-id, t=timestamp, u=username
 -h | -?           Display help text
 -d                Debug mode (extra messages from PAM service authentication)
 -L path[:aflag]   Log surrogate to path, or path%/<surrogate>.lg if path
                   is a directory.
                     aflag is a|b|d|da|db|p|pa|pb|t|ta|tb|u|ua|ub
                       a=append, b=backup, d=datestamp,
                       p=process-id, t=timestamp, u=username
                   This option over-rides -S a:{on|off}.
 -M machine[:port] | :port
                   Machine of server (default is 'localhost'), and TCP
                     port number (default is 7333) on which to communicate
 -N p              NO options:  p=no password required to login
 -O abchmpt        Operation (pick one): a=amplify (daemon) tracing,
      b=boost (surrogate) tracing, c=check, h=hush (surrogate) tracing,
      m=mute (daemon) tracing, p=post, t=terminate
 -p                Use old password method (/etc/passwd instead of PAM)
                        (Linux only)
 -P service        Use the specified PAM service name (default is 'login')
 -q                Quiet operation
 -R path           Root directory
 -s                Systemd Service indicator
 -S {a|t}:{on|off} Surrogate options: a=audit (per process-id), t=tracing;
                     on=enable, off=disable
 -t                Trace requests (tracing amplified initially)
 -T seconds        Set a time limit for retaining icrunrs surrogates that
                   are awaiting a reconnect from a client. The maximum is
                   65534 (a bit over 18 hours). The default is to retain
                   them indefinitely.

Notes:
 Operations a, b, h, m, and t require Super User privilege.

Environment variables:
 ICROOT        Messages and help         ICNETD     Command line options
 ICPERMIT_MACHINE Servermachine[:port]

