[j-nsp] read-only config account, "rancid" user

[matthew zeier]

Not clear how to create a dumbed down read-only user who can just view the config.  

In a Cisco world I'd use "privilege exec level" .  In JunOS, a read-only class can't run "show configuration".

What's the nugget of info I'm missing?