selinux: clean up dead code after removing runtime disable