Protect package installer UI with the new permissions.

The grant_revoke_permissions permission was split in two to
separate granting and revoking a permission. Package installer can
both grant and revoke, while the verifier can only revoke
permissions. We want the permissions UI to be launchable
ony by the installer, therefore it is now protected by the
grant_runtime_permissions permission which only the installer
has.

bug:22231699

Change-Id: I81fe3b20ff1af4806d655537ff30273a4782494c