various:
    setfiles needs to be able to reset policy_conf_t dirs as well
    session: needs object id change exempt so that it can "sed" system files