Constant CAPTURE_GROUP 

pub const CAPTURE_GROUP: &str = "ados-capture";

The group that may write /run/ados/capture (the capture-active marker directory, 2775 root:ados-capture) and the capture root, which the supervisor’s janitor and the installer keep at 3775 root:ados-capture. A capture plugin joins it only while it holds capture.storage.write; it guards nothing else.