services: privileged-service: build: context: . entitlements: - security.insecure