- xdm_t needs getsession for switch user
    - Every app that used to exec init is now execing systemdctl
    - Allow squid to manage krb5_host_rcache_t files
    - Allow foghorn to connect to agentx port - Fixes for colord policy