Migrate some permission checks into the binder

Make it easy to see what checks are actually being enforced
at the IPC boundary.

Simple mutation.

Bug: 145171640
Test: compile
Change-Id: I8940a1a859112aa38e57b8777c1c0aca7a67fc26