I see no reason why unconfined_t should transition to crontab_t, this looks like old cruft