Use GID "wakelock" to control access to kernel wakelock

Add missing usage of the wakelock_use() macro.

Bug: 25864142
Change-Id: I64ff471bcfcd50a6f035907ee124d149e8cda114

bluetooth.te

@@ -20,6 +20,7 @@ allow bluetooth { uhid_device hci_attach_dev }:chr_file rw_file_perms;
 allow bluetooth sysfs_bluetooth_writable:file rw_file_perms;
 allow bluetooth self:capability net_admin;
 allow bluetooth self:capability2 wake_alarm;
+wakelock_use(bluetooth);
 
 # tethering
 allow bluetooth self:tun_socket create_socket_perms;
@@ -57,6 +58,6 @@ allow bluetooth shell_data_file:file read;
 ###
 
 # Superuser capabilities.
-# bluetooth requires net_admin and wake_alarm.
+# bluetooth requires net_admin, wake_alarm and block_suspend
 neverallow bluetooth self:capability ~net_admin;
-neverallow bluetooth self:capability2 ~wake_alarm;
+neverallow bluetooth self:capability2 ~{wake_alarm block_suspend};