sepolicy/system.te: use aosp config instead