Add permission flags persistence and drop invalid entries.

We now pass the entire state when reading/writing, so that the read
code can inspect the app ID or package states in the system and drop
entries that don't exist.

Bug: 182523293
Test: presubmit
Change-Id: I4d8b0f2643b58c7e47dc333e9883beecf4a45d55