Transition to user_run_t on user_run_dir_t, not user_home_t
Traverse /var to get to /var/tmp
Implement file contexts substitutions