DO NOT MERGE. Recursively restorecon when SELinux label changes. am: 7db6041d15  -s ours am: b54724ff4a  -s ours
am: 34483fef4c

Change-Id: I78296170d96abdd77552898ae815d5c7fa59ad98