Merge changes from topics "policy_fixed_set_via_perm_controller", "protect-policy-flags"

* changes:
  Ask Perm Controller to set policy-fixed perms
  Guard changing policy_fixed flag behind permission