anchor.diff:  Dockerfile.
   ====
   
  -*Use `--mount-host` on the Registry*
  +=== Use `--mount-host` on the Registry
   
   It is recommended that persistent volumes be used for registry deployments. If
   you are testing and would like to use the `--mount-host` option, the recommended
   way to do so is:
   
   . Create a new service account.
  -. Add the service account user name to privileged SCC using:
  +. Add the service account user name to the *privileged* SCC using:
   +
   ----
   $ oc edit scc privileged
  
positive.code: 
  ====
  
  *Enable Images to Run with USER in the Dockerfile*
  
  To relax the security in your cluster so that images are not forced to run as a
  pre-allocted UID, without granting everyone access to the privileged SCC, you
  can edit the restricted SCC and change the `*runAsUser*` strategy:
  
  . Run:
  
negative.code: scc-admin    true      []        false     RunAsAny    RunAsAny
  ----
  
  == Deleting Security Context Constraints
  
  [options="nowrap"]
  ----
  