sepolicy: update device.te