reqd_mask/mls

mlsconstrain binder { set_context_mgr } (l1 eq l2);