hardened Gentoo SELinux policy for vpn