+* journalctl --verify: don't show files that are currently being
+ written to as FAIL, but instead show that their are being written
+ to.
+
+* nspawn: allow configuring cgroup (and other) properties via
+ --property= when invoking from the command line.
+
+* add udev rule construct SYSCTL{} to write to sysctls
+
+* assign MESSAGE_ID to log messages about failed services
+
+* coredump: make the handler check /proc/$PID/rlimits for RLIMIT_CORE,
+ and supress coredump if turned off. Then change RLIMIT_CORE to
+ infinity by default for all services. This then allows per-service
+ control of coredumping.
+
+* introduce some call that iterates through cmsg and closes all fds
+ passed in, and use it everywhere...
+