Merge "[security] SubscriptionGroup is exposed to unprivileged callers" into sc-dev