revert DM's change to relabelLabeledP

Old version required the new label to be bounded by current label and
clearance. This means that we can't endorse labeled values without
having _all_ the privileges.

New version (old old version) simply requires that the new label be
bounded by the clearance and be equivalent (given privileges) to the
old label.

Ported examples.
Added example showing signing.