Merge "Only disable trust agents after lockout" into nyc-mr1-dev am: f6487b63a1
am: dc915e418b

Change-Id: I7b498ec9fa8ef080295bffb5eda912e5d58fa525