Include "mode" in the %verify-not configuration for extra_varrun
rpm-verify reports the following problem:
.M....... g /var/lib/selinux/targeted/active/modules/400/extra_varrun
.M....... g /var/lib/selinux/targeted/active/modules/400/extra_varrun/cil
.M....... g /var/lib/selinux/targeted/active/modules/400/extra_varrun/lang_ext