sepolicy: cpu now part of main