Figure out the best way to stop needing to make the "Chrome" side of Chrome OS a permissive SELinux domain.

Rough steps which will be filed as blocking bugs:

-Support SELinux policy in the Chrome OS build system
-Support SELinux denial reporting.
-Define appropriate domains for Chrome and Chrome OS system daemons. Collect denials. Rinse and repeat.

M65 is a tentative date for the first two steps of this.