ls: use '.' (not +) as SELinux-only alt. access flag in ls -l output