- Upgrade to latest from NSA
    Fixed use of policydb_from_image/to_image to ensure proper init of
        policydb.
    1) policydb_read no longer calls policydb_init. Caller must do so first.
    2) policydb_init no longer takes policy_type argument. Caller must set
        policy_type separately.
    3) expand_module automatically enables the global branch. Caller no longer
        needs to do so.
    4) policydb_write uses the policy_type and policyvers from the policydb
        itself, and sepol_set_policyvers() has been removed.