move selinux check right after provision

* selinux check for permissive vs enforcing right
after provision.

* change the selinux setting on the box if it does
not match expected setting

* use ansible selinux module, sets current state
and sets /etc/selinux/config

Change-Id: I7cb46c19c50879f1ca529a58e64b4ea272e2f755