enable selinux for non-dev deployments