selinux: Use a more reliable sentinel to flag /data labelling

/data/anr isn't present on all devices, /data/system is

Change-Id: Ifba71d073dc7b577911386cff316e8a19662cd0d
Merge "selinux: Use a more reliable sentinel to flag /data labelling" into jb4.3