Make WRITE_GSERVICES into system-or-signature (instead of just signature),

as a temporary measure so unbundled Google components (GSF, etc.) can hold
it.  (In the longer term, WRITE_GSERVICES won't be a system permission at
all, but it or something like it will be defined directly by GSF.)