access question

[Nick Edwards]

I think I have the access file sorted but to make sure, our readers.conf is

auth "localhost" {
    hosts: "localhost, 127.0.0.1, ::1, stdin"
    default: "<localhost>"
}

access "localhost" {
    users: "<localhost>"
    newsgroups: "*"
    access: RPA
}


auth custs {
    hosts: "IP.RA.NG.E/CIDR, *.anotherdomain, *.yetanotherdomain"
    default: <custs>
}

access custs {
    newsgroups: *
}


If my reading on man is right, this appear secure,  but is it
appropriate? Do we need a users: line or is it implied ?

Thanks
Nik