init: restore SELinux labels after policy is loaded