Add defconfig variant with SELinux enabled