* seccomp filters for services
-* replace BindTo= by BindsTo=, but keep old name for compat
-
* switch-root: sockets need relabelling
-* switch-root: handle journald restart
-
* segfault in journalctl during /var migration
* systemd-analyze post-boot is broken for initrd