sepolicy: fix some denials

Change-Id: I780ea1e58fb745991b73fa2d0eb128f6990248b5
sepolicy: all su to make system binder call (might not want this?)

Change-Id: I6e0d4d75cfdcd73714a8594cd1c4ffc79958deff