device_phh_treble/sepolicy/keystore.te

allow keystore domain:process getattr;
allow keystore domain:dir r_dir_perms;
allow keystore domain:file r_file_perms;