Fixes #4569 - websockify rules
Fixes #3159: prevent AVC denials related to passenger interaction with the puppet_*_t and a couple other domains
refactoring and adding SCL passenger support
initial import of the policy from foreman-rpm git repo
