[PATCH 6.1 121/611] selinux: ensure av_permissions.h is built when needed