This is useful for selinux debugging, so is most useful in its own optional element. Change-Id: I83532242eacbe211d3bb13e00436f682ca6d7e76