CHG: cgroup resource reconfigure less destructive (Service\Validators)
CHG: limit GECOS to 128 characters. Longer values may result in underruns in re-entrant getpwnam() implementations. (User)
CHG: revert to dovenull user for login processing per Dovecot's documentation (mail/configure-dovecot)