Merge "Only grant visibility of protected broadcasts to system" into rvc-dev am: de659b3b13

Change-Id: I23784bca42ac85a3cfdca4289aa37be0632cdf45