wrap and unwrap ProcessLabel and MountLabel for SELinux
set SELinux label before setting up mount