ws: Rely on pam_selinux.so to transition cockpit-agent correctly

Changes from mgrepl@redhat.com