Assuming that systemd-sysctl and /usr/sbin/sysctl need to be able to read/write all of sysctl
some more systemd policy
    i also renamed some other blockabstracts/blockinherits for consistency
Do not cover distributed policy files in /usr/share/polkit-1
lvm sets scheduler
systemd actually manages daemon pid files
    i did not notice it because it was allowed to create

    although lvmetad doesnt actually create anything in /run by itself
    allow it anyways for failover i suppose

    the dir and sock file are created by systemd because lvmetad is socket activated
    the file is created by systemd because its a systemd pid file
label /var/mail symlink var_spool_t
    i do not maintain a private type on /var/spool/mail dir (at least not yet)
    so far only useradd creates file in there, and it uses libselinux to take care of labeling