Label com.user.dnsleak-guard ProgramArguments /usr/local/bin/ensure_dns.sh RunAtLoad KeepAlive StandardOutPath /tmp/dnsleak-guard.out StandardErrorPath /tmp/dnsleak-guard.err