selinux: restore optimization to selinux_file_permission