hardened Gentoo SELinux policy for timidity