Relax restrictions on appop protection level

Added appop to the set of protection flags that can be used without
combining with a base protection of 'signature' or 'internal'.

Test: Builds, boots.

Bug: 179304245
Change-Id: Ifd7f925acdb560d966905f54603f68519311d9ad