Merge "capabilities: Check ambient caps, last valid runtime cap." am: 044b18cb7f am: 9e9c49f2d8
am: c5e3496a41

Change-Id: Ia6b13d900e2fe49a5f8b8aea34080bd87a6620d3