Access rule application/file can be inaccessible dynamically

There is an usecase that the access rule application/file is dynamically
disabled in order to prohibit access to the secure element. Currently
updateAccessRuleIfNeed() throws AccessControlException when ARA is not
found, but does not throw the same exception in ARF case. This change
make them consistent.

Bug: 129101434
Test: Manually confirmed no ARF is treated in the same way as no ARA.

Change-Id: I8a8e4cb26ff1b92ef189b38364a19ca2205fb63c