seutil: rules for getsebool -a
autorelabel: uses systemctl to reboot
    system_t fd use might need to be associated with is_systemctl_client_subject instead
    not sure yet why it traverse /var/lib