HCE: permissions, OffHost services, payment service.

- Added permission and userId checks for all new
  incoming binder calls.
- Started enumerating OffHostApduServies correctly,
  dealing with the routing as we go.
- Fixed up HostEmulationManager logic to work with the
  correct service; check if service is already bound.
- Persistently bind to payment service if one has been
  selected as default by the user.
- Return 6A82 for AIDs that are not found.

Change-Id: I7b8121bec54b815d94b49747bc4f2bb00de26b36
5 files changed