sepolicy: Fixes to enable enforcing