anchor.diff:  
   [NOTE]
   ====
  -You can drop all capabilites from containers by setting the `requiredDropCapabilities` parameter to `ALL`. 
  +You can drop all capabilites from containers by setting the `requiredDropCapabilities` parameter to `ALL`.
   ====
   
   [id="authorization-SCC-strategies_{context}"]
  
positive.code: 
  Security context constraints allow an administrator to control:
  
  * Whether a pod can run privileged containers
  * The capabilities that a container can request
  * The use of host directories as volumes
  * The SELinux context of the container
  
negative.code: 
  [WARNING]
  ====
  This SCC allows host access to namespaces, file systems, and PIDs. It should only be used by trusted pods. Grant with caution.
  ====
  
  |`hostmount-anyuid`
  