Privilege delegation for rootless containers, what choices do we have?

Whole-channel inclusion: All Systems Go! is an honest teaching channel (title sample + 3 transcripts read: The two transcribed samples are expert technical conference talks explaining real engineering systems and problems, consistent with the channel's teaching focus.); this title passed a strict title check (sonnet) after a labelling pass.