An element for putting SELinux in permissive mode

This is useful for selinux debugging, so is most useful in its own
optional element.

Change-Id: I83532242eacbe211d3bb13e00436f682ca6d7e76
Merge "An element for putting SELinux in permissive mode"