Fetch SELinux externals upstream (CM)