Label the wrappers as initrc_exec_t
    
    The previous attempt to fix the labelling was incorrect. The bin_t label
    on the wrappers caused the services to run as unconfined_service_t.
    
    Instead label the wrappers as initrc_exec_t.
    systemd (init_t) runs the wrapper as initrc_t, which then execs the
    binary and becomes iceccd_t / icecc_scheduler_t.