Make backuptool permissive only in non user builds

Change-Id: Ic95e5a328e429f59f5ca2ca2d6767b9258fce28a
diff --git a/common/private/backuptool.te b/common/private/backuptool.te
index b670fb0..b948b61 100644
--- a/common/private/backuptool.te
+++ b/common/private/backuptool.te
@@ -1,9 +1,11 @@
 type backuptool, domain, coredomain;
 
-permissive backuptool;
-
 neverallow {
     domain
     -recovery
     -update_engine
 } backuptool:process transition;
+
+userdebug_or_eng(`
+    permissive backuptool;
+')