com.apple.app-sandbox.replace-file - Overview of the macOS Authorization Right
macOS 10.14
{
'class' : 'rule',
'comment' : 'Authorize an app-sandboxed application to save (overwrite) a file in a privileged location.',
'rule' : [
'authenticate-admin-nonshared'
]
}