stairway: start in permissive mode for now
Selinux: write config for kk