doc: rsyslog: note that this isnt the traditional setup

also, may want to tune the burst settings in the future. i definitely got rate-limited

hosts/common/programs/rsyslog/rsyslog.conf

@@ -6,6 +6,9 @@
 # - use a StateFile, so that we can read the whole journal the first time we start,
 #   and then survive restarts by picking up where we left off
 # - example: <https://www.rsyslog.com/doc/configuration/modules/imjournal.html#example-1>
+# XXX: the recommended alternative is to have journald forward events to /run/systemd/journal/syslog
+#   and rsyslogd slurps that. unfortunately, that results in many lost messages --
+#   and especially if the gap between launching journald and unlocking the private store is lengthy.
 #
 module(load="imjournal" StateFile="$HOME/.local/share/rsyslog/journal.state")