anchor.diff:  
   [[enable-dockerhub-images-that-require-root]]
   
  -=== Enable dockerhub images that require root
  -
  -Some Dockerhub images (examples: `postgres` and `redis`) require root access and have certain
  -expectations about how volumes are owned.  For these images, add the service account to the
  -`anyuid` SCC.
  +=== Enable Dockerhub Images that Require Root
  +
  +Some Dockerhub images (examples: `postgres` and `redis`) require root access and
  +have certain expectations about how volumes are owned.  For these images, add
  +the service account to the `anyuid` SCC.
   
   ----
   $ oadm policy add-scc-to-user anyuid system:serviceaccount:myproject:mysvcacct
  
positive.code: 
  [NOTE]
  ====
  In order to preserve customized SCCs during upgrades editing settings on the default SCCs
  other than priority, users, and groups is not recommended.
  ====
  
  [[creating-new-security-context-constraints]]
  
negative.code: 
  [NOTE]
  ====
  In order to preserve customized SCCs during upgrades, do not edit settings on
  the default SCCs other than priority, users, and groups.
  ====
  
  . Edit the *restricted* SCC:
  