pipewire: run with the System::Pipewire smack label