systemd 216, test first with no changes
leave journal permissions as is, needed to set machine id, or enough to use the ISOs for that from now?