fix #3: no $::selinux_current_mode when $::selinux is false
Documentation fixes and tweaks