Merge changes Ib7b95ae7,Ib4b0aadf

* changes:
  Check dex2oat_exec SELinux policy with both Runtime APEX & "legacy" dex2oat.
  Check dex2oat_exec SELinux policy with apps targeting API level 28.