Function is_os_blocked 

pub fn is_os_blocked(err: &Error) -> bool

Whether an access error is macOS’s privacy system (TCC) refusing, rather than ordinary permissions: TCC denials are EPERM, ordinary ones EACCES (spec §9.1.1 fact 2). Rust maps both to PermissionDenied, so the raw code decides.