sepolicy: Fix remaining ghost denials

Change-Id: I4ec5d15dd8367e07d191a915664b36083d2ad803