Distributors ponder a systemd change

> That might be true if SELinux was more widely adopted. Unfortunately, that isn't the case.

That's a "but the light's better over here" argument. Poettering is pushing this because it's "the right thing to do". But the *right* thing to do is for it to be in SELinux, where there can be actual admin policies around process-killing instead of just an on/off switch. So we should either do the expedient thing to do (which is to leave the defaults where they are) or the right thing to do (which is to put this in SELinux with hooks in systemd to support it). This change is neither right, nor expedient.