Merge "Add knownSigner to permissions needed by trusted OEM apps" into tm-dev