MAC/do: Enable changing 'security.mac.do.rules' from a jail

Now that sysctl_rules() has been fixed to behave.

Reviewed by: bapt
Approved by: markj (mentor)
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D47602