The HDFS service type (M13-03), modelled on Apache Ranger's: paths with read, write and execute, looked up and tested with Hadoop's own (shaded) client over hdfs:// RPC, HA nameservices or webhdfs://, with simple or Kerberos authentication. Packaged as a plugin directory (descriptor, classes and lib/) that the release ships in plugins/hdfs.