hardened Gentoo SELinux policy for thunderbird