sepolicy: Fix more denials

 * Zygote needs to fork certan things
 * Installd needs to rename files

Change-Id: I643eace5af71dbd45a3c55518c516ea45bdefe07