Merged handle unknown policydb flag support from Eric Paris. Adds new
        command line options -U {allow, reject, deny} for selecting the flag
        when a base module or kernel policy is built.