https://github.com/XDU-SysSec/ExcessivePermissionAttack/blob/main/main.go#L27

因该是 conf.AdminCertKey = viper.GetString("auth.2.key")，请纠正谢谢。