keepass*: note that private-dev blocks access to new hardware keys

Which may be surprising to some users (see #4883).

Fixes #4883.

1 files changed, 3 insertions, 0 deletions

diff --git a/etc/profile-a-l/keepass.profile b/etc/profile-a-l/keepass.profile
index dae3b03f0..bc7878ac9 100644
--- a/etc/profile-a-l/keepass.profile
+++ b/etc/profile-a-l/keepass.profile
@@ -38,6 +38,9 @@ seccomp
 shell none
 
 private-cache
+# Note: private-dev prevents the program from seeing new devices (such as
+# hardware keys) on /dev after it has already started; add "ignore nou2f" to
+# keepassxc.local if this is an issue (see #4883).
 private-dev
 private-tmp