selinux: move user accesses in selinuxfs out of locked regions