hardened Gentoo SELinux policy for slocate