SELinux: turn mount options strings into defines