pub const LOCAL_ADMIN_SUBJECT: &str = "local-admin";
Explicit subject required for wildcard local-administration scope.