sepolicy: Fix a few denials when using backup service

Change-Id: Ia5c307a126d42f1dd5952f809f8b4ca1c686a33c