rsync: add mac_admin capability