better support for selinux

in 1.5 we bandaided selinux support by telling users to use privileged: true security contexts which is not always ideal