build-sys: prune the list of directories we create on install
update TODO
cgroup: additional validity checks for cgroup attribute names
unit: optionally allow making cgroup attribute changes persistent