PrivateDevices=true and/or NoNewPrivileges=true break SELinux transition from init_t to dovecot_t

See:
https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.org/thread/MYQQAM5OBUCTQOGVRBQRVA2A2X5N2LSZ/
https://bugzilla.redhat.com/show_bug.cgi?id=1564348

--- dovecot.service.in
+++ dovecot.service.in
@@ -24,7 +24,6 @@ PrivateTmp=true
 NonBlocking=yes
 ProtectSystem=full
 ProtectHome=no
-PrivateDevices=true
 
 # You can add environment variables with e.g.:
 #Environment='CORE_OUTOFMEM=1'
