login: make auth optional
initial udev
av: userspace av to av.cil
	moving these back since adding them to individual modules causes
	dependency issues and having these unconditionally in policy is not a
	problem