Add mako based sepolicy
Fixes for nfc with the AOSP sepolicy