allow vdc vdc:capability kill;