Confining to the operating system is quite fine. Since there's already the `confine :operatingsystem => :openwrt` is this additional confine needed?