code: func addSELinuxOptions(config []string, selinuxOpts *runtimeapi.SELinuxOption, separator rune) []string {
  	// Note, strictly speaking, we are actually mutating the values of these
  	// keys, rather than formatting name and value into a string.  Docker re-
  	// uses the same option name multiple times (it's just 'label') with
  	// different values which are themselves key-value pairs.  For example,
  	// the SELinux type is represented by the security opt:
  	//
  	//   label<separator>type:<selinux_type>
  	//
  	// In Docker API versions before 1.23, the separator was the `:` rune; in
  	// API version 1.23 it changed to the `=` rune.
  	config = modifySecurityOption(config, selinuxLabelUser(separator), selinuxOpts.User)
  	config = modifySecurityOption(config, selinuxLabelRole(separator), selinuxOpts.Role)
  	config = modifySecurityOption(config, selinuxLabelType(separator), selinuxOpts.Type)
  	config = modifySecurityOption(config, selinuxLabelLevel(separator), selinuxOpts.Level)
  
  	return config
  }
docs: // addSELinuxOptions adds SELinux options to config using the given
  // separator.