Add sepolicies rules for tsens-service so that it can run
in enforcing mode and non-root privileges

Change-Id: I85f6f08dbef39f0a9db7b0b506228ea8c4e2959b