[rwth-security] SELinux changes for KVM-separated (Kata) containers