PRIV_RESTRICTQRUN
{ "restrictqrun", PRIV_RESTRICTQRUN },
RealUid != 0 && bitset(PRIV_RESTRICTQRUN, PrivacyFlags))