Initial config

mls true/false statement depends on commit 9125337
If getent return non-zero then user is not in passwd

By the way, we only support passwd authentication source...
Reminder to deal with /run/user/0: We should not add run dir context
specs for UID < 1000!