LSM: SafeSetID: fix userns handling in securityfs