dontaudit hal_perf_default self:capability { dac_override dac_read_search };