askpwd/ntp
    associate is_passwordagent_role with askpwdagent_t
    make chrony_helper run in ntp client domain and make
    ntp client domain a systemd onshot domain