am af40649e: Merge "Set NO_NEW_PRIVS on zygote init"

* commit 'af40649e4ad506e312b53518cd2b9f2b58dee3ba':
  Set NO_NEW_PRIVS on zygote init