drop openrc folders from config protect, move mesa video_cards use flags where they belong