Things are working as expected now. With normal users, but also system users. I haven't tested behaviour with SELinux though. I have no clue about configuring this. I think we can close this now as fixed.