[DO NOT MERGE] Backport BAL restrictions from S to R, this blocks apps from using Alarm am: 1d737c2fbd

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/20833418

Change-Id: I517bb63b1593c7364d88c3e44ad3d6cc3a12aae0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>