Fix Cynara policy setting, use Smack label as app identifier