Systemd needs to be able to do these, and it does not bypass
any of our apparmor rules.
Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>