manifest: track hardware and su