- Drop hwclock entry: this is not supported on containers.
- Fix keytable entry: we need to specify us, not us.map.gz.