sepolicy: address a couple more denials

Change-Id: Ia7f1873b4017534f9ca1591c1155cd76e5a7564d
Merge "sepolicy: address a couple more denials" into lollipop