- Turn on systemd policy
    - mozilla_plugin needs to read certs in the homedir.
    - Dontaudit leaked file descriptors from devicekit
    - Fix ircssi to use auth_use_nsswitch
    - Change to use interface without param in corenet to disable unlabelednet
    - Allow init to relabel sockets and fifo files in /dev
    - certmonger needs dac* capabilities to manage cert files not owned by root
    - dovecot needs fsetid to change group membership on mail
    - plymouthd removes /var/log/boot.log
    - systemd is creating symlinks in /dev
    - Change label on /etc/httpd/alias to be all cert_t