like -Z, or if CTX is specified then set the SELinux
                         or SMACK security context to CTX