Grant all PAM using applications read access to SELinux state