Comment 14 for bug 1376445

We really need the U1 plugin to add "unconfined" to the ACL of all newly created accounts.

We recently landed some changes in signond which mitigate this problem, but they only solve the issue for accounts which are created after this fix landed.
I guess I could add a session migration script to signond, to add "unconfined" to the ACL of the old U1 accounts, or maybe a hack to signond to treat "unconfined" specially and let it access any resource.