3.18 Merge window part 2

For this to work well and not make your security framework useless because it can't block anything you need to have privilege separated into discrete components that can have different privileges. Like postfix, sshd or chrome.