Merge "Recursively restorecon when SELinux label changes." into nyc-mr1-dev