Track CM SEPolicy + Manifest updates

Needed this for selinux support.

Updates WIP. DO NOT MERGE.