setools: dontaudit traversal cwd
chronyc: a few chronyc rules