config: build with selinux for all variants but codefirex