sepolicy: address a couple denials

Change-Id: I98eb87b06151f07ca063e87174bfc858a674017d