Merge "New device policy API: UnsafeStateException.getReason()." into sc-dev