fill in: some app, auth, and audit
    auditd is no longer unconfined
subject and miscfiles
    common_subjects can search sysfs to get attribute of securityfs (libselinux)
    common_subjects can read proc lnk_files (/proc/self)

    add miscfiles_read_localization which is basically miscfiles_read_localization_files plus lnk_files
attempt at dealing with exceptions (sec/auth file types and other exceptions)