do not remove foreign certificates
mac: fix solo issues
chef: fix chef-client.timer busy loop in systemd-204