* When shutdown.target is queued begin with an asynchronous sync()?
-* Add ConditionBatteryPower= or ConditionACPower=? (but definitely not both)
-
* add API to close/reopen/get fd for journal client fd in libsystemd-journal.
* maybe add API to send pairs of iovecs via sd_journal_send
* system-wide seccomp filter
-* ability to pass fds into systemd
-
* system.conf should have controls for cgroups
* bind mount read-only the cgroup tree higher than nspawn