Allow user installation of software only with explicit privileged status.
Privileged status can be obtained, for example, by serving in the role of system administrator.