askpwdagent is a user app

it creates /run/systemd/ask-password-block with user id and role

need to associate askpwdagent role with askpwdagent.systemd_run_object

also unconfined.common_subject does not run askpwdagent with a domain transition
we must ensure that unconfined.common_subject creates /run/systemd/ask-password-block with a file type transition
update TODO

i cant find a bluetooth socket activated socket