A “privileged” container is given access to all devices on the host

Extracted from: sandboxed-vs-vanilla/index.md