Policy framework for controlling privileges for system-wide services
