Make SELinux stuff only run once, or if directories are modified.
- Let Chef's directory resource handle the RestoreContext stuff.
- Makes use of a simple text file to determine if a directory has already been handled.
- It is safe for this to run twice, but you don't want it to.  Significantly increases recipe execution time for no reason.
 - Could use a node attribute to achieve the same thing, but this works with Chef-Solo and it's OK if the file happens to disappear, it will simply be recreated.