Nothing to try yetTier: how much it should matter to you
2Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Internal ChangesKind: in v2.1.248,
What probably matters to youSection of the release
A restricted option is threaded into permission setup, but nothing visible here sets or enforces it.
What
The startup routine that builds the tool permission context now also forwards a restricted option alongside the allowed, disallowed and base tool lists and the extra directories. Where the flag is set is decided by the caller; enforcement lives elsewhere.
Evidence
bgSessionPermissionRules
Strings lifted out of the shipped bundle, so the claim above can be checked against them.