Hm -- technically it should be 'after including' this file, right?   It might be worth a clarification message that "This file is not intended to be used directly, and should be included into a filter file which would define following variables.  See selinux-ssh as an example."