<aegis>
  <request>
    <credential name="libbb5-secbins::SEE_SecStorageMaintenance" />
    <credential name="GRP::cal" />
    <for path="/usr/sbin/bb5-init" />
  </request>
</aegis>
