- support mls level selection on unlabeled networks - allow / in usernames in scp (only beginning /, ./, and ../ is special)