Allow selinux=? kernel flag to be controlled.