another attempt at only running restorecon if needed for nameserver