@jdstrand, apologies for the delayed reply. I ran across a few more issues in testing system-trace and wanted to make sure we have everything covered in this request.
It turns out we do not need system-trace. I think it may have been added for openvswitch tracing but it's not required for mainline execution, so let's not add it for now.
We do, however, need to add account-control and kernel-module-control plugs to the list of auto-connected interfaces, in addition to those listed in the original request above.