usage:  /usr/bin/sepol_compute_relabel policy scontext tcontext tclass