com.apple.app-sandbox.create-symlink - Overview of the macOS Authorization Right
macOS 10.14
{
'class' : 'rule',
'comment' : 'Authorize an app-sandboxed application to install a symlink into /usr/local/bin.',
'rule' : [
'authenticate-admin-nonshared'
]
}