Merge "Do not allocate protected AHardwareBuffers with CPU access." into pi-dev