selinux: Only audit permissions specified in policy