# type_transition must be private policy the domain_trans rules could stay # public, but conceptually should go with this init_daemon_domain(recovery_persist)