Setting it is not useful since we changed the default LSM anyway and it
makes enabling SELinux harder (requires changing the cmdline).
(cherry picked from commit f9db313392)
The config is now generated based on Fedora's config. This way we need
to only track qubes specific changes and can quickly update to never
Fedora configs.