given an object number, and the ability
to create snapshots necessary to
'zfs diff'.
+hold subcommand Allows adding a user hold to a snapshot
load-key subcommand Allows loading and unloading of encryption key
(see 'zfs load-key' and 'zfs unload-key').
change-key subcommand Allows changing an encryption key via
ability in the origin file system
receive subcommand Must also have the 'mount' and 'create'
ability
+release subcommand Allows releasing a user hold which might
+ destroy the snapshot
rename subcommand Must also have the 'mount' and 'create'
ability in the new parent
rollback subcommand Must also have the 'mount' ability