Auto-revoke permissions for unused apps

Test: reduce thresholds and test with a toy app:
$ adb shell cmd jobscheduler run -u 0 -f com.google.android.permissioncontroller 2
Change-Id: I1d4c2007d5d0fd7abe1bfbe83672fc42b382f3a2