(if (entitlement "com.apple.private.people")
   (allow mach-lookup (global-name "com.apple.people.agent")))