+* perhaps add "systemctl reenable" as combination of "systemctl disable" and "systemctl enable"
+
+* tty name lock for password agent is broken, since it will always lock "/dev/tty" since we now reattach the agent process when forking it off systemctl
+