This should be done upstream, but we can prototype it in Hyperscale
Looks like there is at least some selinux support per https://cloudinit.readthedocs.io/en/23.2.1/reference/examples.html (ctrl+f selinux)