SELinux managing-confined-services guide - call for review