Allow pki-tomcat to change SELinux object identity.