Add spec for be_enforcing, be_permissiv and be_disabled matchers (for SELinux mode check)