Merge "Add SELinux updater and Settings-based enforcement switch." into jb-mr2-dev