anchor.diff:  
   === Use the hostPath Volume Plug-in
   
  -To relax the security in your cluster so that pods are allowed to use the `hostPath`
  -volume plug-in without granting everyone access to the *privileged* SCC:
  +To relax the security in your cluster so that pods are allowed to use the
  +`hostPath` volume plug-in without granting everyone access to the *privileged*
  +SCC:
   
   . Edit the *restricted* SCC:
   +
  
positive.code: 
  [NOTE]
  ====
  In order to preserve customized SCCs during upgrades editing settings on the default SCCs
  other than priority, users, and groups is not recommended.
  ====
  
  [[creating-new-security-context-constraints]]
  
negative.code: 
  You may control the sort ordering of SCCs in admission by setting the `Priority`
  field of the SCCs.  Please see the
  link:../architecture/additional_concepts/authorization.html#scc-prioritization[SCC
  Prioritization] section for more information on sorting.
  
  === Add an SCC to a User or Group
  
  