kickstart: change SELinux to enforcing, to follow OS defaults

I'm going to be so popular...