Fix MMAC permissions

The default denials were taking down legitimate permissions that
apps can use. As a PoC it's fine, but it breaks regular 3rd-party
apps

Change-Id: I685ab3de1e6d7fc5fa3c00babbff7e2d88a3e9b7