dbus: make DeviceAllow=/DevicePolicy= writable