Fix the spec helper to apply selinux to agents only.