Role re-evaluation should respect ask every time choice by user

Role evalation respect USER_SET flag when the role is not
supposed to override user choices. Role granting logic
is missing ONE_TIME check, ONE_TIME flag should be considered
a user choice.

Fix: 355411348
Test: RolePermissionOverrideTest
FLAG: EXEMPT bug fix
Relnote: security bug fix
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7e1f7097f4a6895358bf1472e6d26c5198d00c11)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:15b296865950d19076a065d8b293d28eae4a3af2)
Merged-In: Ie65c2cd62ba3f24e8dd411abca49e397746bc1a9
Change-Id: Ie65c2cd62ba3f24e8dd411abca49e397746bc1a9