Redmine#4046: update_policy.cf should not clear permissions of git-core

See https://cfengine.com/dev/issues/4046

@zzamboni please review