Merge "Enforce permission on native puller API" into rvc-dev