* Imply DevicePolicy=closed when PrivateDevices= is used
* add an "input" group to udev logic and add all input devices to it
* Imply DevicePolicy=closed when PrivateDevices= is used
* add an "input" group to udev logic and add all input devices to it