SELinux: enable processes with mac_admin to get the raw inode contexts