Ooo, didn't even catch that.  Yeah, we should probably have just one call to file::read here.  There's no hard reason to have a function per fact, so I think we can combine the two into a "resolve_selinux_config" function.