Add a debug flag to trace origins of permission grants

A tool like this seems consistently necessary when debugging
DefPermGrantPolicyTest

Test: presubmit
Bug: 131427665
Change-Id: I1e9a39c701473b88a159939f47d670ba9768548d
2 files changed