Basically, to allow an adm to assign a tap device to a user, but not allowing a user to change any aspects of the host side of the interface .. anotherwards uml_net isn't required.