vendor: enable control privaapp permissions enforcing

most (all?) treble device will probably come with "enforce" set in vendor props anyway

also add gapps permission as some gapps packages come with not complete or outdated permissions
therefore rename it so they dont overwrite it

Change-Id: I8c0c9c3b83160d9bca89c5a5cde56d8e7faca927
diff --git a/prebuilt/etc/permissions/privapp-permissions-omni.xml b/prebuilt/etc/permissions/privapp-permissions-omni.xml
index 482f67b..ebbd6a0 100644
--- a/prebuilt/etc/permissions/privapp-permissions-omni.xml
+++ b/prebuilt/etc/permissions/privapp-permissions-omni.xml
@@ -1,5 +1,9 @@
 <?xml version="1.0" encoding="utf-8"?>
 <permissions>
+    <privapp-permissions package="com.android.settings">
+        <permission name="android.permission.ACCESS_FONT_MANAGER"/>
+    </privapp-permissions>
+
     <privapp-permissions package="android.ext.services">
         <permission name="android.permission.PROVIDE_RESOLVER_RANKER_SERVICE"/>
     </privapp-permissions>
@@ -61,8 +65,10 @@
         <permission name="android.permission.STOP_APP_SWITCHES"/>
     </privapp-permissions>
 
-    <privapp-permissions package="org.simalliance.openmobileapi.service">
+    <privapp-permissions package="org.omnirom.omnibrain">
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
         <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
     </privapp-permissions>
 
 </permissions>