hammerhead: Add sepolicy for hardware tunables

Change-Id: I2b386d639eb808a036aa93711c8acb92b21f3a77