vendor: Update SELinux policy for sysinit

Change-Id: I41d4c25d9d6246cd2ca0a8ff3b5a4e114e3bc4d4
selinux: Add a rule to label the extended keyhandler dex files

These should be treated as regular dex cache files, but they're
expanded outside of the normal cache dir

Change-Id: Id046e1b90116b35d2e7817ed4717fcef78135f08

Conflicts:
	sepolicy/file_contexts
selinux: Fix healthd's access to /dev nodes

Our healthd's support for power-on alarms adds some steps that imply
reading files its user doesn't own. Let it.

Change-Id: I3d4735aaab8fbec7acc460f812bc21f1dfa516ab