Add a HAF access permission

This is signature protected, and extremely dangerous since it
grants system GID.

Change-Id: I2528813de9341187f18ef708e7251b4e5e4003a3
Merge "Add a HAF access permission" into cm-11.0
Merge remote-tracking branch 'cm/cm-11.0' into cm-11.0