Add policies for chrony-sock. Capabilities for
setgid and dac_override are enabled temporarily.

Change-Id: I6352090a9ea61216817a64c90269bfee757d66fb