Fix MMAC permissions

The default denials were taking down legitimate permissions that
apps can use. As a PoC it's fine, but it breaks regular 3rd-party
apps

Change-Id: I685ab3de1e6d7fc5fa3c00babbff7e2d88a3e9b7
Let system components and apps set the enforce state

Change-Id: Ia498f02edd01f43fa37c8a609a53e702c2950d04
Allow Performance Settings to set sys.cpufreq.restored

Change-Id: I9eafc290787b3c2f73d499a4c8fb4a94077b1873
Merge branch 'jb-4.3' into jb-4.3-sel