Enable SELinux and toggle some other config