@raito I don't want processes running as root to magically appear and become attack surface because some application I was running prodded a dbus address and dbus activation ran a daemon that happened to get installed as part of some package something else depended on.