Let minivold run in the recovery se domain

The vold secontext doesn't have enough permissions to allow formatting
volumes. CWM uses minivold directly for this purpose, so go ahead and
let it run in the recovery domain to give it all the permissions needed.

Change-Id: I2ca8e5895bd8cba5ffc9f0758264b3f0fbf38943
Merge remote-tracking branch 'cm/cm-11.0' into cm-11.0