Merge "init: run vendor commands in a separate SELinux context"