CRED: Add a kernel_service object class to SELinux