Just to let you know r21 is now available in hardened-dev.git. No major
changes here. Most of them are for Portage support to allow emerge,
emerge-webrsync, layman etc. to be called from unattended domains like cron
Also fixes a few labeling issues we had (one of them was "semanage" that
fubar'ed /etc/selinux labels).