Initial policy
postfix_local_t is delivery agent
Mark sysadm as a mail_role capable userdomain
Move mta away, prepare for wrapper