== live finding (9201, rc.4) red-proof: roots resolved only when they exist
    privpolicy_test.go:438: binds under roots that do not exist yet were refused: the catalog definition of app asks for container rights the box does not allow: app: bind /mnt/felhom-drives/check/felhom-data/appdata/app -> /c rw; app: bind /mnt/felhom-drives/check/felhom-data/userdata/media -> /m rw
--- FAIL: TestAdmit_RootsThatDoNotExistYet (0.00s)
FAIL
FAIL	gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy	0.006s
FAIL
== restored
ok  	gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy	0.147s
