selinux: correctly label /proc inodes in use before the policy is loaded