sepolicy: add some more policies

* more access to kcal and vibe devices
* allow kernel to unmount labeledfs (for new kernel)
* allow system_server access to time_daemon

Change-Id: I113c14014dde97c7f3c65c8afa60d979b02fcf98
m8: updates for new kernel
m8: add missing CameraParams for new kernel/blobs
sepolicy: add and restorecon /data/OTPData.dat

Change-Id: I4eaa2deb06d84259b4b1c85f4c985a9e917ef7fa