SELinux policy is not reloaded across soft reboots, so we need to detect this and error out if a soft reboot is requested.