allow joe to run setools (sesearch) with joes permissions
    joe can execute cil to create policy.db in homedir, now joe
    also needs to be able to query it