These shouldn't be privileged. For boosted launches, these are only communicating over a socket to the actual booster.

If invoker is running privileged, you could bypass the whitelist and run with the privileged group by running it with an invalid booster type.