The text 16c0154f9094, as Debian 10 (Buster) shipped it.
split the confinement context into a label and mode
aa_splitcon(3) on Linux now