sysadm default contexts
common login users can exec consoletype and sysadm can run it with a type transition
logind can getattr of fixed, removable, scsi_generic storage devices
login wants sys_admin capability