sepolicy: Fix a few denials

 * Zygote needs to set system properties
 * Installd needs to rename files

Change-Id: Ic570830cb4fcc3c0806ae775b9258350d2c90d24
Merge remote-tracking branch 'cm/cm-11.0' into HEAD