Add selinux label support for processes and mount

This initial works adds the process and mount label for selinux to a container when the flag `--selinux-enabled` is true.  It will automatically generate the labels right now and a label is valid for the life of a container.  

This currently only works for devicemapper because btrfs does not have a mount point and aufs does not run on red hat systems.