collect: Restart after changing SELinux permissive

*collectd* needs to be restarted after changing its SELinux domain
to/from permissive, as many operations that may fail only happen at
startup.

collectd.yml

@@ -31,6 +31,8 @@
       domain: collectd_t
       permissive: '{{ collectd_selinux_permissive|d(false) }}'
     when: ansible_selinux.status == 'enabled'
+    notify:
+    - restart collectd
     tags:
     - selinux
   - name: ensure collectd is running
@@ -39,3 +41,8 @@
       state: started
     tags:
     - service
+  handlers:
+  - name: restart collectd
+    service:
+      name: collectd
+      state: restarted