allow toolbox self:capability { kill sys_admin };