gralloc: Add target-specific configuration for secure-only MM heap

 * Older hardware doesn't support this, so add a board flag which makes
   the MM heap only permit secure allocations.

Change-Id: If60f363ed78ced9a28fc3f553d375326b25807d6