selinux: Enable enforcing

Change-Id: Ia516be70020b0d18a8fdb667bc7720d904dd4522
Merge remote-tracking branch 'cm/cm-11.0' into HEAD