this is how one guy passed specific capability rather than all just to get his thing to work.
but after the previous guy’s incident, now i’m not even sure i’m okay doing even that. i undid docker_compatible 1 added in config, and shutdown scrutiny. just not worth it xd