Merge "Allow APEX to customize signature permission allowlist." into main