uncommented security and map_to_guest, using thias/samba for selinux_export_all_rw too