Backport changes to whitelist sockets opened by the zygote. am: 41ca1bce01 am: 49d992fdb0
am: 67c4adb5c1  -s ours

Change-Id: I2af50f6d32be035f491df4a0b83489ba7da186e7