allow vold_prepare_subdirs self:capability sys_admin;