Needs to be able to fork (i suppose pretty much) all domains

I tried just systemd_t and system_t but it was not enough... Maybe
additionally journald_t? I do not know

Not sure if it is worth narrowing this down