-  Allow collectd to read hardware state information
    - Add loop_control_device_t
    - Allow mdadm to request kernel to load module
    - Allow domains that start other domains via systemctl to search unit dir
    - systemd_tmpfiles, needs to list any file systems mounted on /tmp
    - No one can explain why radius is listing the contents of /tmp, so we will dontaudit
    - If I can manage etc_runtime files, I should be able to read the links
    - Dontaudit hostname writing to mock library chr_files
    - Have gdm_t setup labeling correctly in users home dir
    - Label content unde /var/run/user/NAME/dconf as config_home_t
    - Allow sa-update to execute shell
    - Make ssh-keygen working with fips_enabled
    - Make mock work for staff_t user
    - Tighten security on mock_t