TODO: add and remove its to and from to do list resp.
cryptsetup: cryptsetup generator domain
cryptsetup: this filetrans is what it is all about
    (to make sure that the generator generates the runtime service unit with
    the right type)
initial autorelabel
session; can create /.autorelabel with a type transition
add a to do item for fedora-autorelabel-mark oneshot