m7: refine sepolicies

Change-Id: I30cc067c2ba10d836c3e0babc2c3d95276197b7e