---
upgrade:
  - |
    A sys-admin privsep daemon has been added and needs to be included in your
    rootwrap configuration.
  - |
    The following commands are no longer required to be listed in your rootwrap
    configuration: cat; chown; cryptsetup; readlink; tee; touch.