File resource mode => '0555' in config.pp may cause SELinux denials

[failsure]

Hello, I am using this module in a RHEL 7 environment in targeted/enforcing mode. The default mode for the file resource in config.pp is causing a problem with this setup, and stunnel cannot start in enforcing mode:

file { $stunnel_dirs:
    ensure => directory,
    owner  => 'root',
    group  => 'root',
    mode   => '0555',
  }

$stunnel_dirs includes the log directory, and without DAC write permission SELinux requires the following:

allow stunnel_t self:capability dac_override;

Would you consider changing the mode to '0755' here? I did confirm that modifying the permissions removes the denial and allows stunnel to start.