I've sent an updated container-selinux (and selinux-policy) package. I currently don't see a way to automate this dependency, as the versions are not in sync. So that leaves "not forgetting" as an option, which isn't great (for me)