Refs #6979 - Fail when policy cant be (un)loaded

Though unless you record the exit status of foreman-selinux-enable, I don't think the scriptlet will fail, right?  I think the if statement will hide it.