Use CM sepolicy

Change-Id: I2e2eb2575e2d474355feaa13e0b1426d4256a3f7