SELinux: Allow NetLabel to directly cache SIDs