runtime entitlement