fcontext for emerge-webrsync, bug 531994
salt: allow salt minion to ssh_manage_home_files

also dac_override and dac_read_search since some home dirs are not
world readable.
Fix bug 534030 - Update on courier policy with documentation in comments