Set MLS/MCS for user_u context to what will be on remote systems.
    
    The user_u context in the default list was broader than is actually
    configured by default on systems.
    
    https://fedorahosted.org/freeipa/ticket/3224