selinux: Refactor to remove bprm_secureexec hook