committing changes in /etc made by "apt full-upgrade"

Package changes:
-libnss-systemd 241-1+rpi2 armhf
+libnss-systemd 241-3+rpi1 armhf
-libpam-systemd 241-1+rpi2 armhf
+libpam-systemd 241-3+rpi1 armhf
-libsystemd0 241-1+rpi2 armhf
+libsystemd0 241-3+rpi1 armhf
-libudev1 241-1+rpi2 armhf
+libudev1 241-3+rpi1 armhf
-nfs-common 1:1.3.4-2.4 armhf
+nfs-common 1:1.3.4-2.5 armhf
-systemd 241-1+rpi2 armhf
-systemd-sysv 241-1+rpi2 armhf
+systemd 241-3+rpi1 armhf
+systemd-sysv 241-3+rpi1 armhf
-udev 241-1+rpi2 armhf
+udev 241-3+rpi1 armhf

.etckeeper

@@ -953,6 +953,7 @@ maybe chmod 0644 'ld.so.conf.d/libc.conf'
 maybe chmod 0755 'ldap'
 maybe chmod 0644 'ldap/ldap.conf'
 maybe chmod 0755 'letsencrypt'
+maybe chmod 0600 'letsencrypt/.certbot.lock'
 maybe chmod 0700 'letsencrypt/accounts'
 maybe chmod 0700 'letsencrypt/accounts/acme-v01.api.letsencrypt.org'
 maybe chmod 0700 'letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory'

group

@@ -61,3 +61,4 @@ systemd-coredump:x:995:
 ovalwonder:x:1002:jgdye
 kvm:x:106:
 ssl-cert:x:117:
+render:x:118:

group-

@@ -60,3 +60,4 @@ vnstat:x:116:
 systemd-coredump:x:995:
 ovalwonder:x:1002:jgdye
 kvm:x:106:
+ssl-cert:x:117:

gshadow

@@ -61,3 +61,4 @@ systemd-coredump:!!::
 ovalwonder:!::jgdye
 kvm:!::
 ssl-cert:!::
+render:!::

gshadow-

@@ -60,3 +60,4 @@ vnstat:!::
 systemd-coredump:!!::
 ovalwonder:!::jgdye
 kvm:!::
+ssl-cert:!::

init.d/udev

@@ -166,7 +166,8 @@ case "$1" in
 
     log_daemon_msg "Starting $DESC" "$NAME"
     if start-stop-daemon --start --name $NAME --user root --quiet \
-        --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile; then
+        --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile \
+        --notify-await; then
         # prevents udevd to be killed by sendsigs (see #791944)
         mkdir -p $OMITDIR
         ln -sf $PIDFILE $OMITDIR/$NAME
@@ -226,7 +227,8 @@ case "$1" in
 
     log_daemon_msg "Starting $DESC" "$NAME"
     if start-stop-daemon --start --name $NAME --user root --quiet \
-        --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile; then
+        --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile \
+        --notify-await; then
         # prevents udevd to be killed by sendsigs (see #791944)
         mkdir -p $OMITDIR
         ln -sf $PIDFILE $OMITDIR/$NAME

systemd/resolved.conf

@@ -13,7 +13,7 @@
 
 [Resolve]
 #DNS=
-#FallbackDNS=8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844
+#FallbackDNS=
 #Domains=
 #LLMNR=yes
 #MulticastDNS=yes