diff --git a/doc/bugs/test__58___posix__95__spawnp_broken_10_on_darwin/comment_3_07ed2c4793b5db76db573f11edf39368._comment b/doc/bugs/test__58___posix__95__spawnp_broken_10_on_darwin/comment_3_07ed2c4793b5db76db573f11edf39368._comment
new file mode 100644
index 0000000000..a1f54f1f52
--- /dev/null
+++ b/doc/bugs/test__58___posix__95__spawnp_broken_10_on_darwin/comment_3_07ed2c4793b5db76db573f11edf39368._comment
@@ -0,0 +1,27 @@
+[[!comment format=mdwn
+ username="joey"
+ subject="""comment 3"""
+ date="2024-05-27T14:49:20Z"
+ content="""
+This seems like a bug in Nix. 
+
+"security" is a MacOS command.
+<https://ss64.com/mac/security.html>
+
+Several haskell packages contain code that runs it. For example
+<https://hackage.haskell.org/package/certificate>
+in System/Certificate/X509/MacOS.hs:
+
+	createProcess (proc "security" ["find-certificate" ...
+
+I've not checked which one is getting
+pulled into git-annex here, it may vary depending on versions of
+intermediate library dependencies. This search finds several
+other possibilities:
+<https://hackage-search.serokell.io/?q=%22security%22>
+
+And presumably on Nix that program is not in PATH. So it needs to either
+depend on it, or patch out call to it.
+
+The Nix maintainers of git-annex have been emailed about this.
+"""]]