Default to ensuring a kernel is present only
Allow kernel-module-openafs to be install from cvmfs kernel repository
Allow nofiles to be set for cvmfs server user
Make disable selinux more precise
Force a public key to be specified on server.