Node-tier access roster: the entities this node's node-scope rules name, the machine's own mode, and
the captured subnet modes — the tier every hosted endpoint falls through to. Per-endpoint rosters
live on spt endpoint access

Usage: spt.exe node access [OPTIONS] [COMMAND]

Commands:
  allow   Whitelist a subject node-wide, or for one endpoint with --for
  deny    Refuse a subject node-wide, or for one endpoint with --for
  remove  Remove a rule by restating it — node-wide, or for one endpoint
  help    Print this message or the help of the given subcommand(s)

Options:
      --json  Emit machine-readable JSON instead of the human view. Honored by the read/status
              commands (list, whoami, status, description, role, the *-list queries, how-to); action
              commands ignore it
  -h, --help  Print help

Control surfaces:
  MSG — direct messages (a grant binds the single sender)
  RC_VIEW — read-only terminal viewing (a grant admits the whole machine)
  RC_ATTACH — interactive terminal control (a grant admits the whole machine)
  DIGEST — cross-node digest pull (a grant admits the whole machine)
  WAKE — waking a resting endpoint (a grant admits the whole machine)
  SUSPEND — suspending a running endpoint (a grant admits the whole machine)
  XFER — file transfer (a grant admits the whole machine)
  SHELL_LINK — driving a linked shell (a grant admits the whole machine)
  DISCOVER — being found: resolve, advertise, and the resources blurb (a grant admits the whole
  machine)
  FORK — forking this endpoint, mind and all (a grant admits the whole machine)
[
  {
    "kind": "subnet",
    "subnet": "SPT_MANTLE",
    "mode": "closed",
    "rules": 0
  },
  {
    "kind": "subnet",
    "subnet": "SPT_DEV",
    "mode": "closed",
    "rules": 0
  },
  {
    "kind": "home-node",
    "node": "ENLYZEAM (ecb39e40…)",
    "mode": "closed"
  }
]
error: unexpected argument '--subnet-rules' found

Usage: spt.exe node access [OPTIONS] [COMMAND]

For more information, try '--help'.