Function windows_scheduled_task_xml 

pub fn windows_scheduled_task_xml(
    plan: &InstallPlan,
    principal: &TaskPrincipal,
) -> String

Renders the Task Scheduler document for a --start-at login registration.

RunLevel is LeastPrivilege, which is the whole of Windows’ answer to item 2 in this domain: the task runs with the operator’s ordinary filtered token and never with an elevated one, whatever the operator’s group membership.