kernel: add defaults for new SELinux options