Scientific Linux has several "tweak" packages that alter the behaviour of a system. For example there's one (from memory sl-nocolorls) that turns off the default colorization of ls output.
Wouldn't it be a good idea to have an package "Selinux-allow-ptrace" and bundle it as one of the default packages in the "software developer" group? Also create dependencies so that it is installed if you later install a debugger that won't work until ptrace is allowed?
this way users would not have to be fully clued up. An installation without software development tools would be maximally secure. Installing a debugger would change the default, because the maximally secure default is also maximally useless given that choice.