1###
2### A domain for further sandboxing privileged apps.
3###
4
5type priv_app, domain;
6