Merge "Revoke internal permissions upon owner change." into sc-dev