<aegis>
  <request policy="add">
    <credential name="UID::root" />
    <credential name="CAP::fowner" />
    <credential name="CAP::dac_override" />
    <for path="/etc/osso-cud-scripts/aegis-certman-cud.sh" />
    <for path="/etc/osso-rfs-scripts/aegis-certman-rfs.sh" />
  </request>
</aegis>
