Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission (CVE-2026-50201) | HOL Guard CVE