[PATCH] selinux: add hooks for key subsystem