anchor.diff:  to use only the necessary SCC for running router.
   ====
   
  -====
   // See NB[1] below.
   endif::[]
   
  
positive.code: // - Router Service Account (enterprise)
  // and both of these have anchor ‘creating-the-router-service-account’.
  
  Use of labels (e.g., to define xref:../install_config/router/default_haproxy_router.adoc#using-router-shards[router shards])
  requires `cluster-reader` permission.
  
  ----
  
negative.code: 
  To add a 'hostnetwork' SCC to the *router* service account in the *default* namespace:
  
  ----
  $ oadm policy add-scc-to-user hostnetwork system:serviceaccount:default:router
  ----
  