systemd: allow all generator subjects to use system fd
various:
    autorelabel: test run results
    system: some plymouthd related acces
rpm: temporary test to see if roletransition to system_r on rpm_exec_t
    fixes mysterious rpm issue (see TODO)
cryptsetup: generator creates generic unit dirs and symlinks
    reads /etc/crypttab
rpm: fix rbac issue
systemd: generators seem to sometimes create
files other than service unit files (example cryptsetup generator -> 90-device-timeout.conf)
systemd needs to be able to unlinks these