FIX: Reintroduce SELinux Rules for var_lib_t

This is done for backward compatibility and self protection... CVMFS clients should be able to access cache directories in `/var/lib/cache` even if they are not labeled as `cvmfs_cache_t` (yet).
Don't we need setattr here, too?