[PATCH 4.19 024/191] selinux: ensure av_permissions.h is built when needed