Merge "sepolicy: allow cneservice for platform apps"