Is there are reason why users are created within the context unconfined_u:unconfined_r:unconfined_t and not user_u:user_r:user_t? What would it take to create an IPA tool that allows to modify those SE-linux roles, types individually?