Comment 15 for bug 1350598

Versioned policy is needed on touch if the compile is going to be done before reboot. You do not want to blow away currently enforcing policy and install the new version and then run into a situation where you fail, or don't reboot. So at the very least for the failure case we need to support versioned policy.

Another reason however is that policy compiles currently still take a long time and the user should still be able to use their phone while the compile is happening.

The good news is that the features set for a given phone kernel has not been updated, and so we won't hit this yet and can do a first pass without it.