Restore support for labeling non-system apps based on their certificate.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

Change-Id: I814411cbc8d16eaed99a1389f5487529e36e637b