Pull sepolicy from S4

Change-Id: If3536300c04500b501b4a6f19c1a09f70cdd7c45