Add policy style '@'/'!' rules to prop protections

A value of '@' for an operation means all roles can perform that
operation on a property.

A value of '!' for an operation means no roles can perform that
operation on a property.

Related to bp api-v2-property-protection

DocImpact

Change-Id: I1196a58a6f97cd0856bf97463386776a00359a49