Use new SELinux CAF policies