Add sepolicy for SuperSU

Fixes Chainfire's SuperSU workaround

This might need work. Still getting policy denials from init for
setenforce on kernel:security; not sure why it needs this but it looks
like it might be breaking the screen recording app I tried.