SELinux: implement the new sb_remount LSM hook