Merge "capabilities: Check ambient caps, last valid runtime cap." am: 044b18cb7f am: 9e9c49f2d8 am: c5e3496a41
am: de160d974b

Change-Id: I0080a75ddbe34320d522d8891d94084271671638