Track CM's external_sepolicy

Change-Id: I6bd5d986020271b4cc4b47a31644e9ac4a63f677