Backport changes to whitelist sockets opened by the zygote. am: 0f6a0e1560  -s ours
am: 6fa8339792

Change-Id: Id7ad55a251a26782815005218dc186b53e74cfca