If SELinux is currently disabled, setenforce will fail

COOK-2124: selinux::enforcing will no longer try to call setenforce if it is currently disabled.