a5: Add some sepolicy from hammerhead