Merge "Sepolicy: Give Otapreopt right to write A/B artifacts in /data" into nyc-dev