anchor.diff:  Note that a fully-qualified service account user name is in the form of
   *system:serviceaccount:<namesapce>:<name>*.
   
  -. Set the service account using `--service-account=<name>` in the `oadm
  -registry` command.
  +. Create the registry using `oadm registry --service-account=<name> --mount-host=<dir> ...`
  
positive.code: 
  == How Do I?
  
  *Grant Access to the Privileged SCC*
  
  In some cases, an administrator might want to allow users or groups outside the
  administrator group access to create more privileged pods. To do so, you can:
  
negative.code: 
  ====
  
  === Enable Images to Run with USER in the Dockerfile
  
  To relax the security in your cluster so that images are not forced to run as a
  pre-allocated UID, without granting everyone access to the privileged SCC, you
  can edit the restricted SCC and change the `*runAsUser*` strategy:
  
  . Run:
  