+* as Tom Gundersen pointed out there's a always a dep loop if people use crypto file systems with random keys
+
* unset container= in PID1?
* automatically escape unit names passed on the service (i.e. think "systemctl start serial-getty.service@serial/by-path/jshdfjsdfhkjh" being automatically escaped as necessary.