Break out selinux code into separate security class