https://pagure.io/centos-infra/issue/1702

Now that there is a selinux pkg (extra) that still defines (previously removed) some contexts needed for some tools (like mock, zabbix, etc), we just need to modify our roles to ensure that pkg is installed (extra) and so not running zabbix in unconfined mode