move joe to unconfineduser.u
Trying to get a working unconfineduser session so that i can work on other stuff
nasty, but no other way
xserver can read state and rw shm of all unconfined users (they run gui apps w/o domain transition)
making sure that unconfineds create selinux config with proper type transition
idem for audit sec files, just making sure that unconfineduser creates it with appropriate labels
avahi: rw fifo files, signal is redundant
update TODO