+* nspawn should lock container images while running off them
+
+* when invoking "loginctl session-status" default to callers session
+
+* logind,machined: add generic catch-all polkit verbs for most priviliged operations, similar to systemd itself
+
+* "machinectl status" should also show logs of the container in question
+