Only create an SELinux rule if it's actually needed.