Features:
+* use C11 static_assert() where we currently use assert_cc()
+
* journald: also get thread ID from client, plus thread name
* check if we can make journalctl by default use --follow mode inside of less if called without args?
* nspawn: implement personality changes a la linux32(8)
-* nspawn: reset all aux groups
-
* cryptsetup-generator: warn if the password files are world-readable
* cryptsetup-generator: add RequiresMountsFor= to cryptseup service files referencing a file, similar for devices