session: allow session to relabel its file object