# Functions
constraintAppliesTo inspects the constraint's users and groups against the userInfo to determine if it is usable by the userInfo.
NewConstraint creates a new SCC constraint admission plugin.
# Type aliases
ByRestrictions is a helper to sort SCCs in order of most restrictive to least restrictive.