Handle both null and empty string for package name in carrier rule.

If package name is null or empty, the rule should allow all packages signed by the same cert.

Bug: b/28426990
Change-Id: Iba75f0bd4f4642a95aff039d6cadbe3396d3ce51