[cloud] #28: discuss modularized SELinux policy packaging