bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks