Foreman-tasks selinux policy

Note that I also fix three AVCs generated by puppet master. I did not
investigate this further. I can split into two separate commits if needed, they
both have been reported in one issue.