selinux using template instead of binary