sepolicy: add device-specific sepolicies

* includes a nasty hack for rmt_storage. enjoy that

Change-Id: Ifcdefa75e0e1d7779a06e09a044ca876534bf7f1
msm8960: enable selinux enforcing

Change-Id: Idbe05104ef0ddcaa84c7e7cd252b30ac3b3c8f7e