Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t.

Conflicts:
	sssd.te
Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active.
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib