Don't do lazy policy updates while running the rule matching,
run the updates as they happen.

Depends on commit f242064c5df3 ("LSM: switch to blocking policy update notifiers")
Signed-off-by: NJanne Karhunen <janne.karhunen@gmail.com>
Signed-off-by: NMimi Zohar <zohar@linux.ibm.com>