Allow launching firefox when protected by a profile.
Deny xdg-open/gnome-open
Allow apt-dater-wrapper and backuppc-wrapper to send kill
signal to unconfined processes to terminate if the SSH_ORIGINAL_COMMAND
is not what they expect
Audit write to priv keys, pub keys, authorized_keys and config
usr.local.bin.{apt-dater-host,backuppc}-wrapper: use Px instead of px