Merge "Add permission checks for Verification API calls" into jb-mr1-dev