privileges management crd

@fuqcool 

the next step is the testing of management router.