Now that dbus 1.10 has become widely available, we should start to treat ${sysconfdir} as reserved for the sysadmin, and encourage third-party software packages to install their integration files into ${datadir}.
While writing the wording to deprecate XML policy installed by packages into ${sysconfdir}, I realised we didn't give a typical example of what packages should do, so I've added one.
Prompted by https://github.com/firewalld/firewalld/pull/434