Smack: handle zero-length security labels without panic