Merge "Allow explicit permission denial" into oc-mr1-dev