Merge "Prepare for: disallow installation of non-preloads using system certs or uids." into main