rhine: init.rc fixes for encrypted devices

Postpone some /data setup until post-fs-data, so it applies to
decrypted mounts.

Also enable the sensors service, still in class main, so that it's
running for both the decryption screen (if enabled) and final boot
state.  Fixes CYAN-4682.

Change-Id: Idc8c84b0fb5cbe2db1f202cd3bc6d84b589eb70e