sepolicy: Fix a few denials when using backup service

Change-Id: Ia5c307a126d42f1dd5952f809f8b4ca1c686a33c
Merge remote-tracking branch 'upstream/cm-11.0' into berserk