``` setfacl -Rm g:telegraf:rX /var/spool/postfix/ setfacl -dm g:telegraf:rX /var/spool/postfix/ ```