@alexb this is similar to Cannot start the linux client - #4 by ironrobin
maybe it can be a feature request to ship twingate with root:twingate ownership of /etc/twingate so that those who want to add their users to a twingate group can use twingate without entering sudo or a password every time, similar to what docker does!