Enable expand-check in semanage.conf
    
    libsepol was fixed before release 2.4 and expand-check=1 doesn't make a
    big time penalty. On the other hand, it's helpful to make it enabled by
    default.
    
    Resolves: rhbz#1319652