Help finding typical requests (queries) to SELinux policy