Options for createGrants.
Readonly
bridge.runtime.aclState; the live source of truth the runtime enforces.
bridge.runtime.aclState
Domains the shell can offer at all, from buildShellCapabilities.
buildShellCapabilities
Options for createGrants.