memul: Tighten up permissions to appease CTS

Change-Id: I12f2ce8f8ed851655400039f0ddd30cc6d45828e