sepolicy: clean up