Dedup SessionParams.whitelistedRestrictedPermissions

Even though SessionParam.whitelistedRestrictedPermissions is a hiden API
it's still possible to directly set it using reflection.

Bug: 472269954
Test: atest SessionSizeLimitTest
Flag: EXEMPT bugfix
(cherry picked from commit 174693f1586b7216c6f74a59c5a6c55e92acf1ff)
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:e11e5ec5fa15c45c9d97fffd5de10a8f81873325
Merged-In: I1ead472f11a13090f3fda2d5c82d0ef587a5ca84
Change-Id: I1ead472f11a13090f3fda2d5c82d0ef587a5ca84