From MTRHO-48:

crane state transfer, default it’s usable for non-admin users. relies on the restricted SCC. Sets container setContext to pick up restricted SCC, no matter what the user capabilities are (admin,non-admin). This works out of the box with 4.11. With 4.12, restricted SCC has changed to restricted v2, which is more restricted, still works with us. To do that, have to drop all capabilities from rsync container such that restricted v2 SCC gets matched. Not the case with 4.11 and below. Might not match the right SCC.

This most likely impacts MTC as well. Because of our shared logic (or very similar, overlapping logic), it's possible we may solve this in a similar manner as with RHO. pgaikwad1@redhat.com I'll defer to you if you think a single enhancement suffices for both projects, or if we should submit two distinct ones.