d2-common: only build selinux in kernel if we want it

Change-Id: I7df8ebe41321f467a4419cbef65fbd9942d16543