Merge "sepolicy: restrict BINDER_FREEZE to system_server"