Add a HAF access permission

This is signature protected, and extremely dangerous since it
grants system GID.

Change-Id: I2528813de9341187f18ef708e7251b4e5e4003a3
Merge branch 'remote' into mkl