The installer now sets the SPO launch permissions to include only the SYSTEM account, which is the account under which the OpenROAD Application Server service (orsposvc) runs. This enables the lifetime of the SPO to be fully controlled by the orsposvc, by preventing other users from launching an SPO when the orsposvc is trying to shut down.