jf: sepolicy: fix more denials

* sepolicy is a never ending mess

Change-Id: I4b33ca90d0808a0b4263e4e8adf0d77ab4b70d7b