should be revisited to make clearer and also work if the payload elogind runs
with full privs and without userns.
+* portables: introduce a new unit file directory /etc/elogind/system.attached/
+ or so, where we attach portable services to
+
* cgroups: use inotify to get notified when somebody else modifies cgroups
owned by us, then log a friendly warning.