Revert "don't reset selinux context during CHANGE events"
    
    This reverts commit 8bfd0a62fe65c504198639e661c944155a91016d.
    
    We must not disconnect selinux label application from udev's
    primary device node permission handling. They are all applied
    by udev at the same time or not applied at all. External tools
    which mangle device node permissions must not install rules
    to instruct udev to manage the permissions, they can *own*
    the device nodes but need to call chmod()/chown() themselves.