Only use access_disabled if SUPERUSER_EMBEDDED.

It is not possible to reenable Superuser when non embedded. su will reject.

Change-Id: If440d9d758c21c61a2d7c0bef132eb716b494c5d