Consolidate OEM and different privileged permission allowlists into one.

This unifies the way we handle these permission allowlists, and allows
introducing it as one external dependency for the new permission
service implementation.

Bug: 182523293
Test: presubmit
Change-Id: If3abc2fbfd6cace8e38fc633c5c7aa8db9d6a83a