Add binary sepolicy. Get rid of overlay filesystems and move to single base vm disk.