Merge "Allow certain apps to access blobs across users." into sc-dev