Merge "Ensure privileged APIs require runtime permission." into sc-dev