selinux: load the initial SIDs upon every policy load