sepolicy: fix dupe