NFS: Ensure security label is set for root inode