SELinux: break ocontext reading into a separate function