sepolicy/device.te: use aosp config instead