Make sure user services are only run as ceres. Since openssh uses pam login, ssh root@watchIp would open a new systemd user session and start asteroid-launcher or other services as root

Setup permissions so that timed can change time: includes changing the connman's dbus allowing policy, adding a postinst script ran at boot to add CAP_SYS_TIME to timed-qt5 and add xattr to the DISTRO_FEATURES so that setcap is compiled