list_working_copies.type: git instead of .git, moved setenforce Permissive back to setup_vm, service_root handling in install_service_from_github