Merge "[security] SubscriptionGroup is exposed to unprivileged callers" into rvc-dev