This requires some PAM config updates and disabling SELinux.
Also add helper script for running the ostree build.