only build selinux in kernel if we want it