selinux: remove secondary ops call to file_mprotect