- Allow insmod_t to use fds leaked from devicekit
    - dontaudit getattr between insmod_t and init_t unix_stream_sockets
    - Change sysctl unit file interfaces to use systemctl
    - Add support for chronyd unit file
    - Allow mozilla_plugin to read gnome_usr_config
    - Add policy for new gpsd
    - Allow cups to create kerberos rhost cache files
    - Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly