On 3/31/21 2:18 PM, Sean Mooney wrote: > the other anti patter to avoid is centralising all privsep cunciton in a > set of common modules that are called into form differnt moduels. > nova and neutorn are unfrotunetly both guilty of that too but eventully > i would hope that that will be fixed. I thought this was intentional. It's even mentioned in the docs as a way to make it clear that privileged calls will run in a different context: https://docs.openstack.org/oslo.privsep/victoria/user/index.html#using-a-privileged-function