Currently, the privileged flag can only be applied at the network scenario level, affecting all devices in the scenario. However, there are cases where only specific devices require privileged capabilities, while others can operate with standard privileges.

Proposed Change:

Introduce a privileged metadata field at the device level. This would allow selectively granting privileged access to individual devices as needed.

Requirements:

• Extend the device metadata to support a privileged flag.
• Maintain compatibility with the existing --privileged argument in the lstart command:
  • If --privileged is specified, it should override any device-level privileged settings.
• Update the privilege escalation logic:
  • Currently, the presence of --privileged triggers the need for sudo.
  • With this change, the logic must also check if any device has the privileged metadata set, and request sudo accordingly.