hardened Gentoo SELinux policy for wine