foreman_db_t should be a separate type, as we're granting additional permissions to write to it.