<aegis>
	<request>
		<credential name="CAP::chown" />
		<credential name="CAP::setuid" />		
		<for path="/usr/bin/passwd" />
	</request>
	<request>
		<credential name="CAP::chown" />
		<credential name="CAP::setuid" />		
		<for path="/usr/bin/chsh" />
	</request>
	<request>
		<credential name="CAP::chown" />
		<credential name="CAP::setuid" />		
		<for path="/usr/bin/chfn" />
	</request>
</aegis>
