[PATCH 5.4 031/282] selinux: ensure av_permissions.h is built when needed