Augment the CentOS 7 SELinux policy with suitable stuff for nginx+passenger