Thanks for the answer! I will suck it and see. I will disable SIP on a vm. Regarding - capabilities are assigned to a specific team - I will take it one step at a time. Cheers, sivan-rnd