Hrm, I'm a little wary of running the checks when the file is evaluated. Can we maybe just do a lazy check, e.g., if `@selinux_enabled.nil?` then we run the check and set it to true or false?