sepolicy: Some more denials for mount2sd