seutil/auth: do not want unconfined domains to be able to mess with
shadow and policy.X