Don't require MANAGE_ROLE_HOLDERS when removing CDM associatons

Test: manual, using a test app
Fixes: 176133554
Change-Id: Iaeb2eee9936c3ebd8772ad3c8790b3c592b2e401
1 file changed