m7: refine sepolicies

Change-Id: I2507a5857edf262ea0f4411ad0edad8361b456df