selinux: Workaround for devices with PR_SET_NO_NEW_PRIVS enforcement