Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t.
Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active.
Merge branch 'f21-contrib' of github.com:selinux-policy/selinux-policy into f21-contrib