<aegis>
   <request policy="not-inheritable">
      <credential name="TrackerReadAccess" />
      <for path="/usr/bin/lca-tool" />
   </request>
</aegis>
