hardened Gentoo SELinux policy for bluetooth