selinux-h: better 'inline'