Probably best to remove the `/agents` bit so it catches helper-scripts too: https://github.com/theforeman/foreman-selinux/blob/develop/foreman.fc#L43