selinux: look for IPsec labels on both inbound and outbound packets