Update MMAC

Set the general-case denials list to everything that requires a
a signature access level, and allow the rest.

Change-Id: Iaaa8e9e664832bceb51aadcdb0c0ef486f6346c6