== security review round 2, red-proofs
-- same-file extends not refused
--- FAIL: TestAdmit_Round2 (0.00s)
    --- FAIL: TestAdmit_Round2/a_second_service_extends_the_allowed_one (0.00s)
-- healthcheck not bound
--- FAIL: TestAdmit_Round2 (0.00s)
    --- FAIL: TestAdmit_Round2/the_allowed_service's_healthcheck_runs_a_shell (0.00s)
-- image variable not refused
--- FAIL: TestAdmit_Round2 (0.00s)
    --- FAIL: TestAdmit_Round2/the_allowed_service's_image_through_a_variable (0.00s)
-- options variable allowed
--- FAIL: TestAdmit_Round2 (0.00s)
    --- FAIL: TestAdmit_Round2/a_variable_in_a_bind's_options (0.00s)
-- a missing path judged by name again (fail open)
--- FAIL: TestAdmit_ANotYetCreatedPathBehindASymlink (0.00s)
== restored
ok  	gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy	0.123s
