File-based fastd on-verify denylist

example.sh

# Maybe use a Git repo to manage deny.d?
mkdir /etc/fastd/deny.d
# The file can be empty, or be used to store comments about the denylist entry, like a reason
echo "I don't like this peer." > /etc/fastd/deny.d/005c33d33cad50e7e187ed5298abeaa1d010f4aae4feddd89812173537f3b395

fastd.conf

on verify "
	if [ -e \"/etc/fastd/deny.d/$PEER_KEY\" ]; then
		echo >&2 \"Denied peer key $PEER_KEY\"
		exit 1
	fi
	echo >&2 \"Accepted peer key $PEER_KEY\"
";