ANDROID: GKI: arm64 Enable SafeSetID to limit CAP_SET{U/G}ID capabilities

SafeSetID is an LSM module that gates the setid family of syscalls to
restrict UID/GID transitions from a given UID/GID to only those
approved by a system-wide whitelist. These restrictions also prohibit
the given UIDs/GIDs from obtaining auxiliary privileges associated
with CAP_SET{U/G}ID, such as allowing a user to set up user namespace
UID mappings.

Bug: 414893665
Change-Id: Ib363aa42e41cc2a58f89d8827fcd6e949f090c77
Signed-off-by: Kameron Lutes <kalutes@google.com>
(cherry picked from commit 1cc8a421)