You can use xm to remove a domain security label:

 
xm rmlabel [domain-id] [configfile]

This removes the acm_policy label entry from the configfile.