CoreOS and Udica SELinux policies

The RPM route is probably the safest option for this use case. We’ve had improvements around SELinux tooling but I’m not sure how far we’ve got yet.