This will make it compatible with the rpm-ostree model, which has `/var` start out empty (or supports doing so). More information in https://bugzilla.redhat.com/show_bug.cgi?id=1352154
- automatically enable kernel console in pam_securetty