Introduce REQUIRE_DROP, NODROP_FATAL. Add tmpfiles.d/eix.conf