POSIX: SELinux context fixes for Path entries

* Fixed Path entries with secontext='__default__' where no fcontext
  rule applied to the path.
* Permitted setting secontext='' when no SELinux context should be
  applied to a Path entry