Re-add family-specific SELinux policy

This partially reverts commit 21ae2255e1cd2e17a4b9e7766aa1f86eec2f18a6

Change-Id: Ic4e063ef166466843f2f0708c6531cf68c7074ef
init: properly run recursive restorecon

Change-Id: I47c026cb8da15b7b857f7d597be2e9e5d84ef714