1 allow vendor_init vendor_file:system { module_load }; 2 allow vendor_init self:capability { sys_module }; 3