allow odrefresh self:capability kill;
allow odrefresh aac_drc_prop:file { getattr open };