sepolicy: Fix remaining denial