r if CTX is specified then set the SELinux
                         or SMACK security context to CTX