Allow untrusted apps to access VrManager.

There is only a single systemapi at the moment that is callable, and it is
protected by a signature/preinstalled permission.

Bug: 35059826,33297721
Test: manually on a marlin
Change-Id: I778864afc9d02f8b2bfcf6b92a9f975ee87c4724