We want to remove openshift_t domains ability to look at /proc/net, but add new command to list processes which can read it