OptionalmetadataStable operation name emitted in Privileged audit events.
OptionalsignalOptional caller-supplied cancellation signal propagated to the privileged callback.
OptionaltargetResource class touched by the privileged operation, such as capsule-db or files.
Synchronous JSON-compatible metadata redacted before
startedaudit emission.