hammerhead: Update permissions for mpdecision

* Allow communication with thermald socket
* Remove global access to /data
  (thanks for the free review, Nick)
* Allow mediaserver to communicate with mpdecision socket

Change-Id: Ib9fd494e7e7a1634b305996b99993e04033cf3ec