allow runas_app self:perf_event { open read write kernel };