Henceforth, we'll require explicit `allow` caps for commands, or for the config-key service. Blanket caps are no longer allowed for the config-key service, except for 'allow *'. Signed-off-by: Joao Eduardo Luis <joao@suse.de>
