screenshot: add privilege checking rule

No match.