Revert "don't reset selinux context during CHANGE events"
    
    This reverts commit 9a5afe8dab79b3031f5448517b76bf16f0b0779a.
    
    We must not diconnect selinux label application from udev's primary
    device node permission handling. They are all applied by udev at
    the same time or not applied at all.
    
    External tools which mangle device node permissions must not
    install rules to instruct udev to manage the permissions, they
    can *own* the device nodes but need to call chmod()/chown()
    themselves.