They already restrict it to CAP_SYS_ADMIN and probably won’t want to restrict it further,
1 Like
They already restrict it to CAP_SYS_ADMIN and probably won’t want to restrict it further,