<aegis>
  <account>
    <user name="user" group="crypto" />
  </account>
  <request context="INSTALL">
    <credential name="aegis-enabler::tcb-sign" />
    <credential name="CAP::chown" />
    <credential name="CAP::fowner" />
    <credential name="CAP::fsetid" />
    <credential name="CAP::dac_override" />
  </request>
</aegis>
