SELinux: add more validity checks on policy load