1allow idmap dumpstate:fd use;
2