Remove Term, su, and CMUpdater from user builds

Also, set the default root_access property to 0, and
explicitly add to the build packages tools we always
want, to avoid relying on PRODUCT_TAGS that may change
upstream

Change-Id: Iecfb8501cfb2f556d5cafe7d18d06539c0433839