Make cfe_internal_selinux parameters less imperative

closes: https://cfengine.com/dev/issues/3633