I am trying to remove unrestricted_admin, so I added a new attribute 
unrestricted.  Then replaced all the special code within
assert.te to check unrestricted.

Dan