process: add ability to set a security label