kickstart: change SELinux to enforcing, to follow OS defaults