#--privileged
mossy kite
obtuse karma
yes and cc @civic gorge @agile pulsar , seeking to bikeshed/consensus env(privileged:bool) - i think there's an argument that "privileged" is a fairly vague word used in a variety of vaguely similar situations, or that it's too open to misinterpretation. the biggest misread you could have in this case is that "privileged" means "give the llm host-root"
on the other hand, it's a pretty good analogy to docker --privileged, so maybe worth exploring where that analogy breaks down