label /usr/libexec/cockpit-agent as shell_exec_t