- Upgrade to upstream
    dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
    Based on a suggestion from Ulrich Drepper, defer regex compilation until we
        have a stem match, by Stephen Smalley.
    A further optimization would be to defer regex compilation until we have a
        complete match of the constant prefix of the regex - TBD.