first bits of toggle_selinux commited, knows enough to fail on boxes without selinux available.