various:
    gpg audit access write /tmp
    rpm add ioctl to read inherited fifo files
    allow useradd/groupadd to read inh rpm tmp files
    userdel needs obj id change exemption (for setfscreatecon)