📄️ Transport Layer Security (TLS)
LeilFS can encrypt its internal communication channels with TLS — client‑to‑master, client‑to‑chunkserver, chunkserver‑to‑master, chunkserver‑to‑chunkserver (replication) and master‑to‑shadow.
📄️ Access control
LeilFS controls access at three layers: which hosts may mount the filesystem and with what rights (leil-exports.cfg), optional password authentication on an export, and the usual POSIX ownership and permission checks on every operation.