how to understand this SELinux stuff?

[znavko]

Hello! I am translating SELinux info messages. There are some hard 
formulations, but this is the best:

#. type: enumerate
#: doc/guix.texi:1291
msgid "We could generate a much more restrictive policy at installation time, 
so that only the @emph{exact} file name of the currently installed 
@code{guix-daemon} executable would be labelled with @code{guix_daemon_exec_t}, 
instead of using a broad regular expression. The downside is that root would 
have to install or upgrade the policy at installation time whenever the Guix 
package that provides the effectively running @code{guix-daemon} executable is 
upgraded."

I cannot understand the latter sentence. What is the 'guix package that 
provides the effectively running guix-damon'? Can I say just: if guix-daemon's 
executable was upgraded?