Due to a missing "else" the logic to activate a device administrator
was immediately falling through into the logic to remove it. As a result,
the add was immediately countermanded by a remove.
Improve the look of the UI, and add the confirmation screen
for enabling an administrator. This uses the new framework APIs
to show its description and policies it will control.