ensure selinux test runs w/ clean state
refactor test to be more explict about expectations