SEAndroid: Add policy rules for rfs_access daemon

The rfs_access is started as a service by init process. This change
moves rfs_access to its own domain and also adds relevant policies
to move it to confined domain

Change-Id: I1009fa600a587d4a9fdf53cc306f157b34b51908