documentation for the macro "policy_clause"

Actually writes out a policy permission clause in SELinux syntax.

It is defined in the file sets.m4.

m4 code:

define(`policy_clause',
``allow
	$1
	$2:$3
`{
	patsubst($4,`
',`
	')
}';
'')