smack: change API to pass BuxtonString for label

The Smack access checks do not use BuxtonDatas aside from their label
member, so simply pass the label directly when using the API.