- Require root when dnsmasq is needed (clear error message) - Handle stale PID files owned by different user (remove + recreate) - Create bastion dir with 755 permissions - 3 new PID file tests (30 total) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>