code: func (s *mustRunAs) Generate(_ *api.Pod) ([]int64, error) {
  	return []int64{s.ranges[0].Min}, nil
  }
docs: // Generate creates the group based on policy rules.  By default this returns the first group of the
  // first range (min val).