This requires to drop a checkpolicy, because checkpolicy doesn't allow multiple identical domains definition, and "rild" will be defined both in system and vendor. This isn't optimal, but that's still the best solution I've found.