Pulp

When pulp_installer runs as part of vagrant, (currently) we set SELinux to permissive. Errors are logged.

However, nothing happens if SELinux errors are present.

We should do something, like a failure error at the end (configurable whether this happens), and printing any SELinux errors due to Pulp.

Alternatively we could just make it enforcing and let pulp_installer failure on its actual tasks (and thus fail the provision), but that would be disruptive to users. However:

1. We'd still want to print the SELinux errors anyway.
2. Some SELinux errors will break the application at runtime, but not break the installer.

This would affect our vagrant (qemu) CI tests as well. Where FIPS is tested.