usermanage: fix typeattributeset bug
    allow useradd and usergroup access to rpm
sys_admin: these i want reproduce
systemd: due to me removing "(allow is_nsswitch_client_subject self (key (all)))"
initial sysusers
systemd: whoops create is actually search
sysusers: needs some time to analyze
    i do know that it reads shadow files
update TODO
dm: dmsetup, still needs sys_adm, must be legit then
various
    systemctl (shutdown) stream connect to shutdownd
    only write to shutdownd_run_t socket is confirmed for now
    i have no clue how any processes running in the systemctl domain is able
    top run shutdown without a domain transition (but comm= say's shutdown)
sys_admin: dmcrypt, lspci still need sysadm
shutdown
    ... shutdown is linked to systemctl, thats why
kernel update related