SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av