session: make session audit admin
    audit config and log are security file object
    and so, they arent included with files_manage_non_auth_except()
session: policy_conf_t is a security file object
    and so files_manage_non_auth_except does not provide access to
    it
akmods: runs consoletype
akmods:
    reads terminfo
    executes a previous mislabeled file
    was hitting a constraint violation wrt relabeling module_t
    i suspect its the object id change constraint
systemd: nasty
    i suppose session runs askpwdagent:
        not sure whether askpwdagent runs askpwd or session
        but for now i allowed session to run askpwd with a domain transition

    session runs coredumpctl, and bus-proxyd (initial busproxyd)

    journalctl maintains files under /var/lib/systemd/catalog not sure
    if i should labeled that journald_var_lib_t instead

    systemd runs ldconfig

    some udevadm aditional rules

    new type: systemd_updated_t
        seems systemd now maintains an .updated file in the root
        of select mountpoints, i suppose to keep track of changes
        probably related with "factory reset" functionality

    processes running any of the "ctl" commands probably need to
    be able to send a signalto the "ctl" command domain
    (confirmed for askpwdagent and systemctl)