Changes to the certwatch policy module
    
    Use role attributes
    Keep /usr/bin/certwatch generic and label /etc/cron.daily/certwatch
    script with the certwatch application executable type instead
    
    Signed-off-by: Dominick Grift <dominick.grift@gmail.com>