defconfig: update selinux flags and disable it by default

Change-Id: I7859acbc7dc5df03728948e68ee917c69b296277