Merge "Deny apps with broad access from accessing other apps' dirs" into rvc-dev