make selinux policy optional.