Revert "don't reset selinux context during CHANGE events"
    
    This reverts commit 573f68455c1e70155ab1b6c9e1ca38aab09ed31d.
    
    We must not disconnect selinux label application from udev's
    primary device node permission handling. They are all applied
    by udev at the same time or not applied at all. External tools
    which mangle device node permissions must not install rules
    to instruct udev to manage the permissions, they can *own* the
    device nodes but need to call chmod()/chown() themselves.