Track CM's external_sepolicy

Change-Id: I6bd5d986020271b4cc4b47a31644e9ac4a63f677
Merge remote-tracking branch 'ls/kitkat'