nspawn: fix HAVE_SELINUX ifdef