[Fwk security] Fix BundlePermission check for fragments

With the current framework a fragment seems to require
(org.osgi.framework.BundlePermission "*" "fragment")
to attach to a host, instead of the expected and more restrictive
(org.osgi.framework.BundlePermission "<host-symbolic-name>" "fragment")

I have tested with Equinox as well, to make sure the provided symbolic name is correct etc., then it works as expected.