Merge "Move selinux_denial_metadata to /vendor."