Merge "Add permission and constants for appfunctions device policy" into main