Track external_sepolicy from CM

Change-Id: Icb818938cc14c7cb15fc3b21c4db4d23bb912b1b