MLS policy and the X server