selinux,smack: fix subjective/objective credential use mixups