SELinux: add boundary support and thread context assignment