Merge "Make the runas domain enforcing."

runas.te

 type runas, domain, mlstrustedsubject;
-permissive runas;
 type runas_exec, exec_type, file_type;
 
 # ndk-gdb invokes adb shell run-as.