[AT&T, Rogers, Bell, Telus Samsung Galaxy S III] magn2o:
I did a little digging:

The LH9 nfcee_access.xml does NOT include the Google Wallet release keys. It only has ISIS.

<?xml version="1.0" encoding="utf-8"?>

<resources xmlns:xliff="urn:oasis:names:tc:xliff:document:1.2">

<!-- Applications granted NFCEE access on user builds

See packages/apps/Nfc/etc/sample_nfcee_access.xml for full documentation.

-->

<!-- ISIS development certificate-->

<signer android:signature="3082034830820230a00302010202044f62832f300d06092a864886f70d01010505003066310b3009060355040613025553310b3009060355040813024e593111300f060355040713084e657720596f726b310d300b060355040a130449736973310d300b060355040b13044973697331193017060355040313104a564c2056656e7475726573204c4c43301e170d3132303331363030303235355a170d3339303830323030303235355a3066310b3009060355040613025553310b3009060355040813024e593111300f060355040713084e657720596f726b310d300b060355040a130449736973310d300b060355040b13044973697331193017060355040313104a564c2056656e7475726573204c4c4330820122300d06092a864886f70d01010105000382010f003082010a02820101009aaf7f1047a6821ab0b4ffb7d58f8a0a66f09689dc59926e966b24896759b96304825ea149ebf30e6249877fedac185eec7aa7a44dc718ab578584888c673f46bc351b48dcd54f47bd27a0836032899b0510e0ce69863184bcd033b0654f09e801a24f06fadd7330f3665e12fbbf1c2b616ca14ac169d206607f229a7ad6d3579d330373be0de0d7148eabb80beed83602494247c0b7b735812a5ece89c1ce7f2229f757e29ebfae72350d2db27974cd5341ba5872a92f471a0768972e35246d0269d41d345cd8bda2df14009212d9640f3a33116460dce389c5a113b84e4a6b7f8b597cb601e53dace8777e380ffe4d9f0abfa14993a1f653c9a6bb5a245fd10203010001300d06092a864886f70d010105050003820101009089e52bb237b78c92dd95b4d07004751b3d68e12e83ab0baca39ea593b9b9f8f6395491f6616fe4d2e4c7a7e53c898a17f3ab2c9fac3b1c0886ee8e769ba96488aafd646a7aa425fb283cd6d9d600a083d18868d4d93de7ec73b258f61fc66d2a3f4b4c7b53df62fd3374a5e658bd8266ee24480923ea584f2e7adde360b459e4ad01bcb9f5582f95dab3964e546baf5b33f63acfbb64494902ebae5cc0930abb7dabf0e4727fcc755a6baa6e68be3b864ab1e6438fed6dd280f081ef1e3b3545a257b456b68787d8080653c31ed7f96f6b5a67186dc5a35e620b9bbb9d47a1871d58bf38e192906399c53cb2fab61c1392deae6209d6fb476897a471a23ab4" />

<!-- ISIS production certificate-->

<signer android:signature="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" />

</resources>

Adding the Google Wallet release signature is enough to get you past the "Insufficient Privileges" messages, but you will be stuck at "Adding your account". If you check your logcat, you see:

E/NFC JNI ( 1036): phLibNfc_SE_GetSecureElementList(): No SMX detected

So, SMX is definitely not enabled on LH9 -- so, I'm skeptical that anyone has this working on LH9 without having flashed the alternate libs.

This is a freshly restored SGH-I747. I restored with the LEM image then OTA to LH9.

EDIT:

After adding the Google Wallet release keys to ncfee_access.xml and replacing ONLY libnfc.so from the zip in the OP, I can now get past "Adding your account" and successfully add a card. However, the card displays the "Unexpected error" at the bottom, and my Secure Element version is Not Present.

EDIT:

I believe this is the relevant logcat entry as to why I'm getting the "Unexpected Error" and the Secure Element version is Not Present.

I/PinProtectedServicesManagerImpl( 3369): mSecureElementManager.enablePayments failed: com.google.android.apps.wallet.secureelement.SecureElementAppletFileNotFoundException: ControllerAppletImpl: SELECT a0000004762010: statusWord=0x6a82 (File Not Found)