Features:
+* change mount access mode ot 0700 or so for debugfs?
+
+* logind: wakelock/opportunistic suspend support
+
+* seccomp filters for services
+
* replace BindTo= by BindsTo=, but keep old name for compat
* switch-root: sockets need relabelling