sepolicy: allow getopt for appdomain

* Handle denials of this nature:
avc: denied { getopt } ... tclass=unix_dgram_socket permissive=0

* Certain domain needs LD_PRELOAD passed from init. Allow it
for most domain.

Change-Id: I7b78620d64af15ca4690abf49e4c24f0b0d5be9a