Features:
+* man: document in ExecStart= explicitly that we don't take shell command lines, only executable names with arguments
+
+* shutdown: don't read-only mount anything when running in container
+
+* nspawn: --read-only is not applied recursively to submounts
+
* MountFlags=shared acts as MountFlags=slave right now.
+* ReadOnlyDirectories= is not applied recursively to submounts
+
* drop PID 1 reloading, only do reexecing (difficult: Reload()
currently is properly synchronous, Reexec() is weird, because we
can't delay the response properly until we are back, so instead of
* cleanup syslog 'priority' vs. 'level' wording
-* journal: if mmap() fails for mapping window try to unmap a a few older maps
-
* dbus upstream still refers to dbus.target and shouldn't
* when a service has the same env var set twice we actually store it twice and return that in systemctl show -p... We should only show the last setting
* journal: message catalog
-* journal: forward-secure signatures
-
* document the exit codes when services fail before they are exec()ed
* systemctl journal command
- resource control in systemd
- inhibiting
- testing with Harald's awesome test kit
+ - restart
* allow port=0 in .socket units
* xxxOverridable dependencies
-* journald.conf: ImportKernel=
-
* prefdm.service