selinux: don't inline slow-path code into avc_has_perm_noaudit()