CRED: Allow kernel services to override LSM settings for task actions