If SELinux disabled and current state is enabled, then change state dyna...

...mically

While runtime changing on selinux from disabled to any other state isn't possible, it is possible to move from any state to disabled.

This enables the selinux module to do so.
if mode is always disabled, then this should be triggered on every run and would not be idempotent. Instead the exec should have `refreshonly => true` and should subscribe to the selinux_config file resource.