Constrain privileged installer transport