sepolicy: Update for remaining denials

Change-Id: I9892a1d102b560f4d70ebf57668ecc5380023d1c