Only kill when needed when changing permissions

Only kill app when an app-op actually changed.

Do not call revokePermission if permission is already revoked. Even
when the permission is alrady revoked, calling this method will kill the
app the permission belongs to.

Also, apply all device policy state and then perist the state for the
whole app at one. Before we persisted after every individual permission
which caused permissions to be temporarily revoked and then re-granted.

Test: Set up device with device-owner, set up work-profile
Fixes: 126185337, 126326421
Change-Id: Id28caebd36d0c66e83ee6ab4299f0ccb3bc6b488