allow users to use the kvm device