pub(crate) fn optional_label( policy: &SePolicy, destname: &Utf8Path, mode: u32, ) -> Result<Option<GString>>
Look up the label for a path in a policy, returning None if no match is found.