[PATCH 5.10 064/381] selinux: ensure av_permissions.h is built when needed