add missing braces to only call selrecord when intended to ok deraadt@ millert@
add missing braces to only call selrecord when intended to
ok deraadt@ millert@

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars