selinux: generate flask headers during kernel build