This works around a flake I saw which had the same root cause as https://github.com/coreos/rkt/issues/3513. This will potentially help reduce the impact of such future problems as well.
See #39092 We based off of GCI in the brief time where it was using abac.