[PATCH 21/35] ima: Generalize policy file operations