Change subject entrypoint constraint

The subject transition and dyntransition constraints already
make sure that all processes are associated with subject

The subject entrypoint constraint is there to make sure that
subjects can only be entered via types associated with subject_entry_file_object