universal7580: sepolicy: address cpboot daemon denials