platform_system_sepolicy/reqd_mask/roles_decl