the list of API calls is from the privilege checks in pve-manager and
pve-storage. rendered the chapter with asciidoc, without new warnings.
