This is caught by dev_relabel_all_dev()
systemctl_t can also build on systemctl_client_type rules