sepolicy: More rules for recovery

Change-Id: Ie50c04eb83cb9c62f679a1c1aa2ac482af159f7e
Merge "sepolicy: More rules for recovery" into lollipop