<aegis>
<request>
<credential name="CAP::kill"/>
<credential name="applauncherd-launcher::access"/>
<for path="/usr/bin/invoker" id="client"/>
</request>
</aegis>