Include an Enhanced Restricted directive

An ER directive would prevent the script, and its environment shell, and any extracted binary components from running in Administrator mode

What is “administrator mode”? The spec has no such concept, and there’s no guarantee that a JS engine has users, or modes, or permissions at all; nor that it runs in a shell (browsers don’t, for example)