selinux: fix race condition when computing ocontext SIDs