While investigate sth else I noticed /var/spool/rsyslog on e.g. kubernetes hosts contains a whole lot (in the order of tens of thousands) of imfile old state files. We should clean those up based on mtime of say a few weeks, using systemd-tmpfiles this should be easy. cc T357616 in case this turns out to be relevant