DO NOT MERGE. Recursively restorecon when SELinux label changes. am: 7db6041d15  -s ours
am: b54724ff4a  -s ours

Change-Id: I7f64251ce4702bc36913489db789842bd1d1757d