Add recovery defconfig, enables full SELinux support