Merge "Further restrict SELinux API access"