Quick poll @securitytwits: Does your $WORK set SELinux Enforcing mode in production? Anything more than the default targeted policies?