checkpolicy: mark as broken for ZHF