+* maybe add a generator that looks for "systemd.run=" on the kernel cmdline for container usercases...
+
+* timedatctl, localectl: possibly make some commands work without the daemon, for chroot situations...
+
+* nspawn: expose init PID and UUID as cgroup EAs
+
+* logind: consider making suspend inhibitor locks non-session specific, but keep suspend-key inhibitor locks session specific
+