hammerhead: Cleanup SELinux policy

This addresses reviews in:

http://review.cyanogenmod.org/#/c/78600/
http://review.cyanogenmod.org/#/c/77883/

Change-Id: I0813085b20e16c2d62c72a8a43ae5f00200bdd77