- Fix ecryptfs interfaces
    - Bootloader seems to be trolling around /dev/shm and /dev
    - init wants to create /etc/systemd/system-update.target.wants
    - Fix systemd_filetrans call to move it out of tunable
    - Fix up policy to work with systemd userspace manager
    - Add secure_firmware capability and remove bogus epolwakeup
    - Call seutil_*_login_config interfaces where should be needed
    - Allow rhsmcertd to send signal to itself
    - Allow thin domains to send signal to itself
    - Allow Chrome_ChildIO to read dosfs_t