HV-912 Requiring access control context for invocation of privilege-bound APIs