selinux: Allow context mounts for unpriviliged overlayfs