smack_cipso_apply() is missing /smack/cipso fallback for older kernels

Implements subset of #40.