Rhythmbox: dbus access is needed to change songs using hot keys
Pidgin: deny ptrace to silence noise
Thunderbird: allow accessing soem uevent files under /sys/devices/{virtual,pci} and /run/udev/data/+pci... files
Upsmon: allow executing upsmon binary
OpenVPN: rework how sensitive files are accessed. Now condider .conf
as containing sensitive information because they can contain keys.

Also allow to chroot to a generic empty chroot (/etc/openvpn/chroot)