selinux: cleanup the XFRM header