Make insufficientPrivs function usable from a Gate.
bump version number for insufficientPrivs change
bunch of documentation stuff
revert DM's change to relabelLabeledP

Old version required the new label to be bounded by current label and
clearance. This means that we can't endorse labeled values without
having _all_ the privileges.

New version (old old version) simply requires that the new label be
bounded by the clearance and be equivalent (given privileges) to the
old label.

Ported examples.
Added example showing signing.
doc typos
don't require intercalate
first cut at MLObj
fix some warnings
mlObj to create
duh, include TCB
sanity
Completely different MLObj semantics
proper module export list
Different approach to MLObj: kill threads if label changes
don't signal more than once
get rid of spurious context
Default policy value, if you don't need to embed clearance, etc.
include default instances
comments on MLObj.hs
better documentation, add modifyMLabelP