Add the ability to send audit messages to confined admin policies
    Remove permissive domain from cmirrord and dontaudit sys_tty_config
    Split out unconfined_domain() calls from other unconfined_ calls so we can disable unconfined.pp and leave unconfineduser
    virt needs to be able to read processes to clearance for MLS