Privileged Ops

Developer Roadmap

• Hardcoded paths: helper and sudoers paths are fixed in module.json without per-site overrides.
• RBAC: admin actions use manage_options with no finer-grained roles.
• Restore guardrails: selective restore UX and safety checks need expansion.