selinux: Add a rule to label the extended keyhandler dex files

These should be treated as regular dex cache files, but they're
expanded outside of the normal cache dir

Change-Id: Id046e1b90116b35d2e7817ed4717fcef78135f08
(cherry picked from commit fa63e50707738ea1699b8b0672dbd873a3c12220)