Make manage/unmanage admin only

Manage/Unmanage functionality should be admin
only commands. Make this the default in the policy file.

Change-Id: Ieb71891cdedd36f862f3eaae50174e294417b122
Merge "Make manage/unmanage admin only"