<aegis>
  <account>
    <user name="calendar" group="calendar"/>
  </account>
 <request context="INSTALL">
   <credential name="GRP::calendar" />
   <credential name="CAP::setgid" />
   <credential name="CAP::setuid" />
   <credential name="CAP::chown" />
   <credential name="CAP::fowner" />
   <credential name="CAP::dac_override" />
 </request>
</aegis>
