# External storage allow fsck_untrusted self:capability sys_admin;