[PATCH 6.3 139/694] selinux: ensure av_permissions.h is built when needed