Convert the tails-detect-virtualization initscript into a native systemd unit file.
Don't bother creating /var/lib/live in tails-detect-virtualization.

First, our live-config scripts write stuff in there, so if this directory
doesn't exist, we'll notice or we have bigger problems.

Second, even if this directory didn't exist or wasn't writable, then the
following line will fail, and then the unit will enter failed state, and we'll
notice. That's also why I didn't use ConditionPathIsDirectory= nor
ConditionPathIsReadWrite=, as these merely skip the unit (without putting it in
failed state) if the conditions are not met.
Drop sysvinit-specific (sensigs.omit.d) tweaks for memlockd.

This mechanism isn't supported by systemd. If it appears that memory erasure
fails due to memlockd being killed too early, we'll find a way to fix it.
http://www.freedesktop.org/wiki/Software/systemd/RootStorageDaemons/ might
be a good starting point if that happens.
Remove/adjust a bunch of Wheezy-specific hacks and comments.
Use systemd-detect-virt rather than virt-what.

It makes the system a bit lighter, but mainly, since systemd v214,
systemd-detect-virt now works fine without special privileges,
so we'll be able to simplify our detection and reporting system a bit.
Simplify the virtualization detection & reporting system.

Now that we're using something that works as non-root (systemd-detect-virt),
we don't need to run it as boot time as root. Let's do everything in one
pass at login time.