Merge "Restrict access to hwservicemanager" into oc-dev

private/app.te

private/bluetooth.te

private/halclientdomain.te

private/hwservice_contexts

private/hwservicemanager.te

private/keystore.te

private/mediaserver.te

private/surfaceflinger.te

private/system_server.te

private/vr_hwc.te

public/cameraserver.te

public/domain.te

public/dumpstate.te

public/hal_allocator.te

public/hal_audio.te

public/hal_bluetooth.te

public/hal_bootctl.te

public/hal_camera.te

public/hal_configstore.te

public/hal_contexthub.te