Distributors ponder a systemd change

> But the *right* thing to do is for it to be in SELinux

I don't see why SELinux is the obviously right place to do it.

> where there can be actual admin policies around process-killing instead of just an on/off switch

It isn't just a switch in systemd. You can have admin policies in polkit.