CMUpdater's permissions now require it to be privileged

for REBOOT and WRITE_CACHE

Change-Id: Ife5d1ee82f40a87b9632bf932d055ac291c65ce0