- Allow setsched for virsh
    - Systemd needs to impersonate cups, which means it needs to create tcp_sock
    - iptables: the various /sbin/ip6?tables.* are now symlinks for /sbin/xtables-mult