Moving the RUNNING_DIR to /run, to avoid polluting /etc.
Disable the default KEYRING:persistent:%{uid} name.

Addressing
Invalid UID in persistent keyring name while getting default ccache
Wait for named to get to talk to dirsrv.
Fix support for Unit.Wants, add Unit.Requires.
Some pid files (like /var/run/messagebus.pid) do not seem to be covered by tmpfiles.d.
Harden ipa-server-configure-first with set -e.
We need to start sshd after the volume structures are populated.

Addressing
print() on closed filehandle LOG at /usr/bin/systemctl line 30.
Ignore systemd-tmpfiles errors.
Avoid (and catch) endless dbus.socket / dbus.service loop.