Features:
-* make sure bash completion uses journalctl --fields to get fields list
-
* use phyical_memory() to allow MemoryLimit= configuration based on available system memory
* ProtectKernelLogs= (drops CAP_SYSLOG, add seccomp for syslog() syscall, and DeviceAllow to /dev/kmsg) in service files
* RestrictNamespaces= or so in services (taking away the ability to create namespaces, with setns, unshare, clone)
-* IAID field must move from [Link] to [DHCP] section in .network files
-
* make sure the ratelimit object can deal with USEC_INFINITY as way to turn off things
* journalctl: make sure -f ends when the container indicated by -M terminates