Merge "Merge "Merge "Improve container capability bounding in containers" am: 586fd52b34 am: ed05287c55" into oc-dev-plus-aosp am: 2da7dfe179 am: 9b2a564764" into oc-mr1-dev-plus-aosp