More traversal "fixes"
Make the bulk of systemd domain unconfined for debugging