Merge "If ENSURE_VERIFY_APPS is enforced, reject installation by default." into oc-dev
am: 79cc05a6c1

Change-Id: Iaf27be8afb90c8364fa365d6d21bef61e8b7470b