CRED: Wrap access to SELinux's task SID