SELinux policy for bubblewrap
