Merge "Remove manual pregrants for SystemCaptionsService (handled via roles)" into tm-dev