- Label polgengui as a bin_t
    - Allow semanage to create /.autorelabel file
    - Label systemd unit files under dracut correctly
    - Allow systemd domain to read /proc
    - Allow sssd to write to user keyrings for managing kerberos
    - Allow rhsmcertd to read init state
    - Allow fetchmail to create own pid with correct labeling
    - Fix rhcs_domain_template()
    - Allow roles which can run mock to read mock lib files to view results
    - Allow rpcbind to use nsswitch