selinux: fix setting of security labels on NFS