allow rootfs labeledfs:filesystem associate;