sepolicy: add device-specific sepolicies

Change-Id: Ifcdefa75e0e1d7779a06e09a044ca876534bf7f1