This may need a corresponding update to the SELinux policy.  Might it be better to move it to the tmp/ directory, which we use for caches?