- Add basic rules for pegasus_openlmi_domain
    - Add pegasus_openlmi_domain_template() interface for openlmi-*
    - Allow pppd to send signull
    - Allow tuned to execute ldconfig
    - Fix use_ecryptfs_home_dirs boolean for chrome_sandbox_t
    - Add additional fixes for ecrypts
    - Allow keystone getsched and setsched
    - ALlow nova-cert to connect to postgresql
    - Allow keystone to connect to postgresql
    - Allow glance domain to stream connect to databases
    - Allow all cups domains to getattr on filesystems
    - Fix pacemaker_use_execmem boolean
    - Allow gpg to read fips_enabled
    - FIXME: Add realmd_tmp_t until we get /var/cache/realmd
    - Add support for /var/cache/realmd
    - Add labeling for fenced_sanlock and allow sanclok transition to fen
    - Allow glance domain to send a signal itself
    - Allow xend_t to request that the kernel load a kernel module
    - Add additional interface for ecryptfs