selinux: Set socket NetLabel based on connection endpoint