Merge "capabilities: Check ambient caps, last valid runtime cap."
am: 044b18cb7f

Change-Id: Ib45e37d200b57b9837befdf203012b88724f41e5