umask_changes: false
manage_network: true
allow_ptrace: false